anti a935bf2663 feat(api): cap offset on list-topologies and transcript endpoints ...

The other five query endpoints (/logs, /attackers, /attacker-commands,
/bounties, /topologies/{id}) already declared le=2147483647 on offset;
these two were inconsistently uncapped. Bring them in line to close
the F4/D deep-pagination row.

Also resolves F4/T (ORM sort injection — already mitigated by the
regex pattern on /attackers sort_by, no other route accepts a column
name) and F4/D (limit cap — already universal) with code pointers.

2026-04-24 14:14:25 -04:00

8.7 KiB

Raw Blame History

View Raw