Fred fbbff63f2e fix(storage): clamp non-positive entry query limits to the maximum ...

WithLimit ignored a zero limit, so /v1/entries?limit=0 produced a query
without a SQL LIMIT and returned every matching entry, bypassing the
1000-entry cap. The official API client sends limit=0 for any filter
with an unset Limit field, making unbounded queries easy to trigger.

Clamp non-positive values to the maximum in both WithLimit and
WithLimitAndMaximum so every caller (REST API, Google Reader) stays
bounded, as intended by 0909323a.

2026-07-20 20:28:45 -07:00

..

api_key.go

refactor(misc): replace fmt.Errorf with errors.New where possible

2025-10-06 17:54:04 -07:00

batch.go

refactor(storage): unexport a bunch of symbols

2026-02-06 16:17:18 -08:00

category.go

fix(storage): use <> ALL when counting remaining categories

2026-07-20 19:40:11 -07:00

certificate_cache.go

refactor(internal): use errors.Is instead of equality operator

2026-05-11 17:40:12 -07:00

enclosure.go

fix(storage): scope enclosure lookup by user

2026-06-14 21:27:47 -07:00

entry_pagination_builder.go

feat(search): swap plainto_tsquery for websearch_to_tsquery

2026-06-12 21:29:24 -07:00

entry_query_builder.go

fix(storage): clamp non-positive entry query limits to the maximum

2026-07-20 20:28:45 -07:00

entry_test.go

fix(storage): index only the first 500K characters of the article contents to avoid tsvector limits

2025-08-17 19:32:56 -07:00

entry.go

fix(storage): respect category hide_globally when marking all as read

2026-07-09 20:21:34 -07:00

feed_query_builder.go

feat(reader): parse and persist feed and entry language from RSS, Atom, and JSON Feed

2026-07-01 21:00:17 -07:00

feed.go

feat(reader): parse and persist feed and entry language from RSS, Atom, and JSON Feed

2026-07-01 21:00:17 -07:00

icon.go

fix(api): scope icon lookup by user in icons endpoint

2026-07-19 20:26:49 -07:00

integration.go

refactor(internal): use errors.Is instead of equality operator

2026-05-11 17:40:12 -07:00

nav_metadata.go

perf(misc): batch navigational information queries

2026-05-07 19:35:10 -07:00

storage.go

feat: show size of DB on the about page

2025-03-05 15:49:32 -08:00

user.go

security(user): don't leak usernames existence via timing

2026-06-02 20:44:42 -07:00

web_session.go

refactor: rewrite and simplify web sessions management

2026-04-11 19:21:59 -07:00

webauthn.go

fix(webauthn): persist backup flags

2026-05-11 20:29:27 -07:00