Add CSRF prevention plugin for graphql-yoga

[wKich]

Signed-off-by: Dmitriy Lazarev [email protected]
Found by: Ali Basma from X41-Dsec GmBh

Motivation

Recently Backstage-core team contacted with me to notify that our graphql plugin doesn't prevent CSFR attack https://the-guild.dev/graphql/yoga-server/docs/features/csrf-prevention

Approach

Added graphql-yoga plugin to prevent CSRF

[changeset-bot]

🦋 Changeset detected

Latest commit: ad5158d

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@frontside/backstage-plugin-graphql-backend	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[frontsidejack]

The following preview packages were published:

Name	Version	Install Command
@frontside/backstage-plugin-graphql-backend	0.1.10-dl-prevent-csrf-graphql.0	yarn add @frontside/backstage-plugin-graphql-backend@dl-prevent-csrf-graphql
@frontside/backstage-plugin-graphql-backend-module-catalog	0.3.5-dl-prevent-csrf-graphql.0	yarn add @frontside/backstage-plugin-graphql-backend-module-catalog@dl-prevent-csrf-graphql

Generated by @thefrontside/actions

[taras]

Thank you 🙏