Query whitelisting means that only the persisted queries that reside on the server are allowed to execute. All other GraphQL queries are denied.

The whitelisting may be enabled by setting the configuration property caas.persisted-queries.whitelist to true. See Section 9.2, “Query Whitelisting” for more details.