REST: Limit max page size

If this isn't set it's possible to set any page size. Let's restrict
this to the value set in settings.

Signed-off-by: Stephen Finucane <stephen@that.guru>
Cc: Andy Doan <andy.doan@linaro.org>
Reviewed-by: Andy Doan <andy.doan@linaro.org>

diff --git a/patchwork/api/base.py b/patchwork/api/base.py
index dbd8148d033f3563162ae5c1865dd55f68051b5d..0797990596ba4800bcce98058e54f18d099906c8 100644 (file)
--- a/patchwork/api/base.py
+++ b/patchwork/api/base.py
@@ -32,7 +32,7 @@ class LinkHeaderPagination(PageNumberPagination):
        https://tools.ietf.org/html/rfc5988#section-5
        https://developer.github.com/guides/traversing-with-pagination
     """
-    page_size = settings.REST_RESULTS_PER_PAGE
+    page_size = max_page_size = settings.REST_RESULTS_PER_PAGE
     page_size_query_param = 'per_page'
 
     def get_paginated_response(self, data):