Skip to content

Document GraphQL operation limits startup warning and recommended security profile - #3377

Draft
pwizla wants to merge 1 commit into
mainfrom
cms/document-graphql-operation-limits-warning
Draft

Document GraphQL operation limits startup warning and recommended security profile#3377
pwizla wants to merge 1 commit into
mainfrom
cms/document-graphql-operation-limits-warning

Conversation

@pwizla

@pwizla pwizla commented Aug 21, 2026

Copy link
Copy Markdown
Collaborator

This PR updates documentation based on strapi/strapi#27390.

Adds an "Operation limits and security" section to the GraphQL API page (cms/api/graphql.md) documenting:

  • The startup warning Strapi now emits before Apollo starts when depthLimit is not set or maxLimit is unlimited (-1)
  • That custom Apollo validation rules are independent and not reflected in the warning
  • The recommended configuration profile (defaultLimit: 25, maxLimit: 100, depthLimit: 10) with JS and TypeScript examples
  • A cross-link to the full GraphQL plugin configuration reference

Generated automatically by the docs self-healing workflow.
Review before merging.

…ofile

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@pwizla pwizla added the auto-doc-healing Automatically generated documentation PR label Aug 21, 2026
@pwizla pwizla self-assigned this Aug 21, 2026
@strapi-cla

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@vercel

vercel Bot commented Aug 21, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
documentation Ready Ready Preview Aug 21, 2026 2:09am

Request Review

@github-actions github-actions Bot added internal PRs created by the Strapi core team pr: updated content PRs updating existing documentation content source: CMS labels Aug 21, 2026
@pwizla
pwizla requested a review from Bassel17 August 21, 2026 13:02
@pwizla pwizla added this to the 7.1.0 milestone Aug 21, 2026
@pwizla pwizla added the flag: merge pending release Waiting for the related product PR to be merged before merging this documentation PR label Aug 21, 2026
@pwizla

pwizla commented Aug 21, 2026

Copy link
Copy Markdown
Collaborator Author

@Bassel17 Does it make sense to add this to public docs?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-doc-healing Automatically generated documentation PR flag: merge pending release Waiting for the related product PR to be merged before merging this documentation PR internal PRs created by the Strapi core team pr: updated content PRs updating existing documentation content source: CMS

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants