validate.xml

<validate-graphql-request error-variable-name="name" max-depth="2">
   <authorize>
      <rule path="/___*" action="reject" />
   </authorize>
</validate-graphql-request>