Merge pull request #190 from agco/feature/AGCMD-4008

cast limit and offset to ints since mongo 3.2 is sensitive.
agco · Mar 20, 2017 · f550d10 · f550d10
2 parents 3211be0 + e5a5d15
commit f550d10
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/lib/route.js b/lib/route.js
@@ -435,8 +435,8 @@ function route(harvester, name, model, schema, routeOptions) {
         var query = _.clone(req.query);
         query.ids && (query.id = ids) && (delete query.ids);
 
-        var limit = query.limit;
-        var offset = query.offset;
+        var limit = parseInt(query.limit, 10);
+        var offset = parseInt(query.offset,10);
 
         var sortParams = req.query["sort"];
         var sort;