chore: securing apollo server cache against DDoS attacks (specklesyst…

…ems#1099) * chore: securing apollo server cache against DDoS attacks * enabling csrf protection
spgoad · Oct 11, 2022 · 718e0d6 · 718e0d6
1 parent b23e2fc
commit 718e0d6
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/packages/server/app.ts b/packages/server/app.ts
@@ -156,6 +156,9 @@ export async function buildApolloServer(
         : [])
     ],
     introspection: true,
+    cache: 'bounded',
+    persistedQueries: false,
+    csrfPrevention: true,
     formatError: buildErrorFormatter(debug),
     debug,
     ...optionOverrides