GraphQL Protection: Limit number of Mutations in a Query

[predic8]

Protect against Brute Force GraphQL Style:

'''
[
{“query”: "mutation {securityAnser(year: "17/05/73", new: "joshua123")}}
{“query”: "mutation {securityAnser(year: "18/05/73", new: "joshua123")}}
{“query”: "mutation {securityAnser(year: "19/05/73", new: "joshua123")}}
{“query”: "mutation {securityAnser(year: "20/05/73", new: "joshua123")}}
{“query”: "mutation {securityAnser(year: "21/05/73", new: "joshua123")}}
...
]
'''

[t-burch]

Not actually possible if following the specification
Only one query can be in the HTTP request, whilst one query can have multiple operations, they need to be named and only one named operation can be executed at a time.

[predic8]

Even if it is againt the spec. We can count the number of mutation and send back an error if there are more than X mutations.