From f739a92e1e15c67dcc83b1b99b85afd24b6ccd4a Mon Sep 17 00:00:00 2001 From: Axel Cocat Date: Sat, 2 Mar 2024 16:36:27 +0100 Subject: [PATCH] fix(DataTablesSsp): clamp offset and limit values --- src/armory/DataTablesSsp.ts | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/armory/DataTablesSsp.ts b/src/armory/DataTablesSsp.ts index 0df629e..a0a4063 100644 --- a/src/armory/DataTablesSsp.ts +++ b/src/armory/DataTablesSsp.ts @@ -67,8 +67,8 @@ export class DataTablesSsp { private joinSql = ""; public constructor(query: Query, db: Pool, table: string, primaryKey: string, columnSettings: IColumnSettings[]) { - this.start = parseInt(query.start as string, 10); - this.length = parseInt(query.length as string, 10); + this.start = Math.max(0, parseInt(query.start as string, 10)); + this.length = Math.min(100, Math.max(0, parseInt(query.length as string, 10))); this.draw = parseInt(query.draw as string, 10); this._order = (query.order as { column: string; dir: string }[]).map((order) => { return { column: parseInt(order.column, 10), dir: order.dir };