Spir GroupSpir Group

Sanity Query Proxy Test

This page tests that direct queries to sanity.fileAsset and sanity.imageAsset are blocked, while normal queries and asset references are allowed.

Direct query to sanity.fileAsset

Expected: BLOCKED
*[_type == "sanity.fileAsset"] | order(_createdAt desc) { _id, url, originalFilename }

Direct query to sanity.imageAsset

Expected: BLOCKED
*[_type == "sanity.imageAsset"] | order(_createdAt desc) { _id, url }

Query with _type in array (fileAsset)

Expected: BLOCKED
*[_type in ["sanity.fileAsset", "sanity.imageAsset"]] { _id }

Normal query (should work)

Expected: ALLOWED
*[_type == "page"][0...5] { _id, title }

Query with asset reference (should work)

Expected: ALLOWED
*[_type == "page"][0] { _id, title, mainImage { asset-> { _id, url } } }

Test URL Query Parameter

You can also test by adding a query parameter to the URL:

/test-sanity-proxy?query=*[_type+==+"sanity.fileAsset"]