Attributes on controller actions to block the use of Select and Expand
Define attributes that block the use of Select and Expand.
Attributes for blocking Select and Expand were added a few builds ago, but we’re marking it complete on UserVoice today. Sorry for the delay.
Breeze 1.3.1 is now available, including Inheritance and OData writes/saves.
Ward Bell commented
Meanwhile, in your controller you can examine the query string from the request for presence of $select and $expand and throw an exception if you see it.