fix: show 404 if request is GET and queries are not allowed

strawberry-graphql · Sep 25, 2024 · 7da16a4 · 7da16a4
1 parent 18f0f5d
commit 7da16a4
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/strawberry/http/async_base_view.py b/strawberry/http/async_base_view.py
@@ -184,6 +184,9 @@ async def run(
             else:
                 raise HTTPException(404, "Not Found")
 
+        if request_adapter.method == "GET" and not self.allow_queries_via_get:
+            raise HTTPException(404, "Not Found")
+
         sub_response = await self.get_sub_response(request)
         context = (
             await self.get_context(request, response=sub_response)

diff --git a/strawberry/http/sync_base_view.py b/strawberry/http/sync_base_view.py
@@ -180,6 +180,9 @@ def run(
             else:
                 raise HTTPException(404, "Not Found")
 
+        if request_adapter.method == "GET" and not self.allow_queries_via_get:
+            raise HTTPException(404, "Not Found")
+
         sub_response = self.get_sub_response(request)
         context = (
             self.get_context(request, response=sub_response)