Request for HASURA_GRAPHQL_MAX_ALIAS_COUNT configurable in Hasura Cloud instance

[alex-sl-eng]

Is your proposal related to a problem?

We need the option to configure the limitation of alias allowed in single GraphQL query to address batching attack (a known security issue in GraphQL)

https://lab.wallarm.com/graphql-batching-attack/

Describe the solution you'd like

Ability to configure the alias limitation in Hasura Cloud instance: HASURA_GRAPHQL_MAX_ALIAS_COUNT

Describe alternatives you've considered

None

[seanparkross]

Reported to team. Thanks.

[sachsom95]

Hey team reported based on my feedback, is there a different label that can be added as this can be used as an attack on the GQL server?

[alex-sl-eng]

@seanparkross any updates on this request?