Skip to content

Reject multiple or introspection subscription root fields - #5770

Merged
rmosolgo merged 1 commit into
rmosolgo:masterfrom
ydah:fix-subscription-root-validation
Oct 7, 2026
Merged

rmosolgo merged 1 commit into
rmosolgo:masterfrom
ydah:fix-subscription-root-validation

Conversation

@ydah

@ydah ydah commented Oct 5, 2026

Copy link
Copy Markdown
Contributor

The subscription validator counted direct AST selections, allowing a single fragment containing multiple root fields to pass validation. It also allowed __typename as the subscription root field.

Collect root fields through named and inline fragments, count distinct response names, and reject introspection fields, including aliases.
Valid merged selections and nested introspection remain supported.

@rmosolgo rmosolgo added this to the 2.6.12 milestone Oct 7, 2026
@rmosolgo

rmosolgo commented Oct 7, 2026

Copy link
Copy Markdown
Owner

Thanks for this improvement!

@rmosolgo
rmosolgo merged commit fe9974a into rmosolgo:master Oct 7, 2026
15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants