Allowlisting (persisted queries) | Voters

187

Allowlisting (persisted queries)

Max Stoiber

I'd love to allowlist the queries my actual app sends so malicious actors can't put together expensive queries manually!

Justin Woodward

This feels a bit anti-pattern being the scope here is edge, whereas the origin server is the ultimate source of truth.

Would love to hear the counter-argument of others.