Serve
Features
Security
Block Field Suggestions

Block Field Suggestions

💡

This page is currently under construction and expected to change. Please feel free to reach out to us directly in case you are having any troubles.

This is a feature that allows you to prevent returning field suggestions and leaking your schema to unauthorized actors provided by GraphQL Armor

In production, this can lead to Schema leak even if the introspection is disabled.

How to use?

Install the plugin:

npm install @escape.tech/graphql-armor-block-field-suggestions

Then, add it to your plugins:

mesh.config.ts
import { blockFieldSuggestionsPlugin } from '@escape.tech/graphql-armor-block-field-suggestions'
import { defineConfig } from '@graphql-mesh/serve-cli'
 
export default defineConfig({
  plugins: () => [
    blockFieldSuggestionsPlugin({
      // Toggle the plugin | Default: true
      enabled: true,
      // Mask applied to the error message | default: '[Suggestion hidden]'
      mask: '[Suggestion hidden]'
    })
  ]
})