@@ -438,9 +438,10 @@ Enable the filter:
438
438
services:
439
439
book.group_filter:
440
440
parent: 'api_platform.serializer.group_filter'
441
- arguments: # Default arguments values
442
- - 'groups' # The query parameter name
443
- - false # Allow to override the default serialization groups
441
+ arguments: # Default arguments values
442
+ - 'groups' # The query parameter name
443
+ - false # Allow to override the default serialization groups
444
+ - ['allowed_groups'] # Whitelist of groups (null by default will allow all groups)
444
445
tags: [ 'api_platform.filter' ]
445
446
` ` `
446
447
@@ -518,9 +519,10 @@ Enable the filter:
518
519
services:
519
520
book.property_filter:
520
521
parent: 'api_platform.serializer.property_filter'
521
- arguments: # Default arguments values
522
- - 'properties' # The query parameter name
523
- - false # Allow to override the default serialization properties
522
+ arguments: # Default arguments values
523
+ - 'properties' # The query parameter name
524
+ - false # Allow to override the default serialization properties
525
+ - ['allowed_property'] # Whitelist of properties (null by default will allow all properties)
524
526
tags: [ 'api_platform.filter' ]
525
527
` ` `
526
528
@@ -576,8 +578,8 @@ To avoid uncontrolled data exposure, you can also specify a whitelist of propert
576
578
# app/config/api_filters.yml
577
579
578
580
services:
579
- book.group_filter :
580
- parent: 'api_platform.serializer.group_filter '
581
+ book.property_filter :
582
+ parent: 'api_platform.serializer.property_filter '
581
583
arguments: [ 'groups', false, ['allowed_property', {'nested': ['safe_property']}] ]
582
584
tags: [ 'api_platform.filter' ]
583
585
` ` `
0 commit comments