graphql limit (#26321)

patriciasantaana · web-flow · commit a6fe76af99e1 · 2025-11-05T17:30:04.000Z
diff --git a/src/content/docs/api-shield/security/graphql-protection/index.mdx b/src/content/docs/api-shield/security/graphql-protection/index.mdx
@@ -16,4 +16,4 @@ GraphQL malicious query protection is available for all API Shield customers. En
 
 ## Limitations
 
-Our initial release is limited to parsing GraphQL `POST` bodies smaller than 5 KB. This limit will be lifted in a future release. Additionally, we currently inspect only `POST` requests with `content-types` of `application/json` or `application/graphql` where the queries do not contain fragments or multiple operations. Parsing and rules are limited to paths ending in `/graphql`.
+Our initial release is limited to parsing GraphQL `POST` bodies smaller than 20 KB. This limit will be lifted in a future release. Additionally, we currently inspect only `POST` requests with `content-types` of `application/json` or `application/graphql` where the queries do not contain fragments or multiple operations. Parsing and rules are limited to paths ending in `/graphql`.

Original file line number	Diff line number	Diff line change
`@@ -16,4 +16,4 @@ GraphQL malicious query protection is available for all API Shield customers. En`
`16`	`16`
`17`	`17`	`## Limitations`
`18`	`18`
`19`		-Our initial release is limited to parsing GraphQL `POST` bodies smaller than 5 KB. This limit will be lifted in a future release. Additionally, we currently inspect only `POST` requests with `content-types` of `application/json` or `application/graphql` where the queries do not contain fragments or multiple operations. Parsing and rules are limited to paths ending in `/graphql`.
	`19`	+Our initial release is limited to parsing GraphQL `POST` bodies smaller than 20 KB. This limit will be lifted in a future release. Additionally, we currently inspect only `POST` requests with `content-types` of `application/json` or `application/graphql` where the queries do not contain fragments or multiple operations. Parsing and rules are limited to paths ending in `/graphql`.