Vamsi-klu opened a new pull request, #62659:
URL: https://github.com/apache/airflow/pull/62659

   ## Summary
   - Add `MAX_LIMIT=500` constant to `LimitFilter` class
   - Reject requests with `limit` exceeding 500 with HTTP 400
   - Without this, clients can request `limit=1000000`, potentially exhausting 
server memory on large result sets
   
   ## Test plan
   - [ ] Verify requests with `limit=100` (default) still work
   - [ ] Verify requests with `limit=500` work (boundary)
   - [ ] Verify requests with `limit=501` return HTTP 400
   - [ ] Run `pytest tests/api_fastapi/core_api/routes/public/test_variables.py 
-v`
   
   **Note:** This is a breaking change for API consumers requesting more than 
500 items per page.
   
   🤖 Generated with [Claude Code](https://claude.com/claude-code)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to