https://leapgraph.com/graphql-api-security

This article mentions several add-on packages that Reaction may want to use. This issue is simply to investigate whether these vulnerabilities are present and try adding the packages to solve them.

Current behavior

Field validation passes when any character from field value is a unicode alpha char.
"%%" does not pass validation, which is the expected behaviour:

However, "Jo$%n Do?" validates c

WHAT

Make plot_duplicates output clearer.

WHY

The graph plotted by plot_duplicates output can be cluttered, especially when there are several duplicates found for an image. The titles of each image run into each other, which makes it hard to read the plot. Additionally, the titles can be hard to read, possibly due to a static dpi. An example can be seen below:

![imgdedup_plot_iss

Can you please add some performance numbers to the main project docs indicating inference latency running some common hardware options e.g. AWS p2, GCP gpu instance, CPU inference, Raspbery pi, etc.

Is your feature request related to a problem? Please describe.
Currently, if the developer wants to register a new admin account, it doesn't let it do that because sendgrid API keys are needed. Remove this dependency for local, and switch to using an identical emailService which uses Nodemailer (Gmail option preferred) since Nodemailer is free. Maybe feature flag this property

**Describe

Type: minor

Describe the bug
After adding a new account address, the screen goes blank you appear to be logged out, but when you refresh the page, the address is there and you are still logged in.

To Reproduce
Steps to reproduce the behavior:

1. Go to storefront
2. Log in
3. Click user name in upper right > Profile
4. Add a new address.
5. When you submit the form, see the

Description

Great wagtail integration! Was trying to figure out on how to remove all items from the basket or a single product item. The current API allows subtracting the quantity of the product but not remove the product by itself.