I completely understand the security risk of increasing the page limit, which this module (defaults) lets you do, but I was very surprised to see the number input field had a minimum of 50 set on it. For what reason?

Our server is timing out with 50, I want it to be lower. I understand that the default maximum was 50 without this module, but why was 50 set as the minimum?

Comments

Rob230 created an issue. See original summary.

bbrala’s picture

bbrala
Location Netherlands
commented
Category: Feature request » Support request

50 is from core I think. You can always just use ?page[limit]=10 if you want less. This is default core behaviour.

https://www.drupal.org/docs/core-modules-and-themes/core-modules/jsonapi...

Not sure why it doesn't allow less, would need to dive into the why.

rob230’s picture

rob230 commented

The point is to limit it from the server which provides the feed, not from the person making the request. If someone can request 50 and 50 would cause timeouts and pressure on the server then we should be able to stop that by setting a lower maximum.