iven/hms
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(health): 全 handler page_size 上限 100 防止 DoS

Browse Source 
22 个 handler 文件统一添加 .min(100) 限制分页大小
This commit is contained in:
iven
2026-05-21 22:38:29 +08:00
parent 4b40d47b71
commit d70b027f20
18 changed files with 29 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
crates/erp-health/src/handler/device_reading_handler.rs
View File

@@ -76,7 +76,7 @@ where
{
require_permission(&ctx, "health.device-readings.list")?;
let page = query.page.unwrap_or(1);
let page_size = query.page_size.unwrap_or(20);
let page_size = query.page_size.unwrap_or(20).min(100);
let result = device_reading_service::query_device_readings(
&state,
ctx.tenant_id,
@@ -109,7 +109,7 @@ where
{
require_permission(&ctx, "health.device-readings.list")?;
let page = query.page.unwrap_or(1);
let page_size = query.page_size.unwrap_or(20);
let page_size = query.page_size.unwrap_or(20).min(100);
let days = query.days.unwrap_or(7);
let result = device_reading_service::query_hourly_readings(
&state,