From 4bcd13ed742e42d9355dc25c1754f0aecb49dc23 Mon Sep 17 00:00:00 2001 From: Joas Schilling Date: Tue, 13 Jan 2026 16:25:07 +0100 Subject: [PATCH] fix(comments): Put a limit to the limit Signed-off-by: Joas Schilling --- apps/dav/lib/Comments/CommentsPlugin.php | 1 + 1 file changed, 1 insertion(+) diff --git a/apps/dav/lib/Comments/CommentsPlugin.php b/apps/dav/lib/Comments/CommentsPlugin.php index 2ab7d6ee018db..be9984004e573 100644 --- a/apps/dav/lib/Comments/CommentsPlugin.php +++ b/apps/dav/lib/Comments/CommentsPlugin.php @@ -157,6 +157,7 @@ public function onReport($reportName, $report, $uri) { if (!is_null($args['datetime'])) { $args['datetime'] = new \DateTime((string)$args['datetime']); } + $args['limit'] = min(max(1, $args['limit']), 100); $results = $node->findChildren($args['limit'], $args['offset'], $args['datetime']);