[SECURITY] The page limit now has a maximum.

nglasl · Sep 13, 2018 · 87b9656 · 87b9656
1 parent 4e7dde6
commit 87b9656
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/README.md b/README.md
@@ -1,6 +1,6 @@
 # [mediawesome](https://packagist.org/packages/nglasl/silverstripe-mediawesome)
 
-_The current release is **4.0.3**_
+_The current release is **4.0.4**_
 
 > This module allows creation of dynamic media holders/pages with CMS customisable types and attributes (blogs, events, news, publications), including versioning.
 

diff --git a/src/controllers/MediaHolderController.php b/src/controllers/MediaHolderController.php
@@ -66,7 +66,7 @@ public function getPaginatedChildren($limit = 5, $sort = 'Date', $order = 'DESC'
 
 		$request = $this->getRequest();
 		if($limitVar = $request->getVar('limit')) {
-			$limit = $limitVar;
+			$limit = ($limitVar > 100) ? 100 : $limitVar;
 		}
 		if($sortVar = $request->getVar('sort')) {
 			$sort = $sortVar;