Make default query limit configurable via query_default_limit

The default limit of 20 for content queries ({% setcontent %} and the
query DSL) was hardcoded in ContentQueryParser. Read it from the new
general/query_default_limit config key, falling back to 20 so existing
behavior is unchanged when the key is unset.

Adds a documented key in config/bolt/config.yaml and a yaml-migration
to add it to existing installations.

Author: Vondry

config/bolt/config.yaml

@@ -152,6 +152,12 @@ query_search:
 # example in `type: select`.
 maximum_listing_select: 50000
 
+# Default number of records returned by a content query (e.g. `{% setcontent %}`
+# or the query DSL) when no explicit `limit` is given. This guards against
+# unintentionally fetching an entire ContentType. Override per query with
+# `limit`, e.g. `{% setcontent pages limit 30 %}`.
+query_default_limit: 20
+
 # Template for showing the search results. If not defined, uses the settings for
 # listing_template and listing_records.
 #

src/Storage/ContentQueryParser.php

@@ -181,8 +181,9 @@ protected function parseOperation(): void
      */
     protected function parseDirectives(): void
     {
-        // If the user doesn't pass in a limit, we'll get 20. Don't break the site by fetching _all_.
-        $this->directives = ['limit' => 20];
+        // If the user doesn't pass in a limit, we fall back to the configured
+        // default (20). Don't break the site by fetching _all_.
+        $this->directives = ['limit' => $this->config->get('general/query_default_limit', 20)];
 
         if (! $this->params) {
             return;

yaml-migrations/m_2026-05-25-config_query_default_limit.yaml

@@ -0,0 +1,7 @@
+# Add the configurable default limit for content queries (`{% setcontent %}`
+# and the query DSL). Previously hardcoded to 20 in ContentQueryParser.
+file: bolt/config.yaml
+since: 6.2.0
+
+add:
+  query_default_limit: 20