fix: arrayLimit default configured to be 30

Signed-off-by: kauanAfonso <kauan.afonso@ibm.com>

Author: kauanAfonso

packages/rest/src/__tests__/acceptance/request-parsing/array-limit.acceptance.ts

@@ -19,7 +19,7 @@ describe('Query parameter array limit', () => {
     if (app) await app.stop();
   });
 
-  context('with default arrayLimit (100)', () => {
+  context('with default arrayLimit (30)', () => {
     beforeEach(async () => {
       app = givenApplication();
       await app.start();
@@ -34,26 +34,17 @@ describe('Query parameter array limit', () => {
       expect(response.body.ids).to.eql(ids);
     });
 
-    it('parses arrays with 21 items correctly', async () => {
-      const ids = Array.from({length: 21}, (_, i) => (i + 1).toString());
-      const query = ids.map(id => `ids=${id}`).join('&');
-
-      const response = await client.get(`/test?${query}`).expect(200);
-      expect(response.body.ids).to.eql(ids);
-      expect(Array.isArray(response.body.ids)).to.be.true();
-    });
-
-    it('parses arrays with 100 items correctly', async () => {
-      const ids = Array.from({length: 100}, (_, i) => (i + 1).toString());
+    it('parses arrays with 30 items correctly', async () => {
+      const ids = Array.from({length: 30}, (_, i) => (i + 1).toString());
       const query = ids.map(id => `ids=${id}`).join('&');
 
       const response = await client.get(`/test?${query}`).expect(200);
       expect(response.body.ids).to.eql(ids);
       expect(Array.isArray(response.body.ids)).to.be.true();
     });
 
-    it('converts arrays with 101+ items to objects (exceeds default limit)', async () => {
-      const ids = Array.from({length: 101}, (_, i) => (i + 1).toString());
+    it('converts arrays with 31+ items to objects (exceeds default limit)', async () => {
+      const ids = Array.from({length: 31}, (_, i) => (i + 1).toString());
       const query = ids.map(id => `ids=${id}`).join('&');
 
       await client.get(`/test?${query}`).expect(400);

packages/rest/src/rest.server.ts

@@ -330,7 +330,7 @@ export class RestServer
     }
 
     // Configure query parser with custom arrayLimit if provided
-    const arrayLimit = this.config.queryParser?.arrayLimit ?? 100;
+    const arrayLimit = this.config.queryParser?.arrayLimit ?? 30;
     this._expressApp.set('query parser', (str: string) => {
       return qs.parse(str, {
         arrayLimit,
@@ -1201,7 +1201,7 @@ export interface RestServerResolvedOptions {
      * The qs library defaults to 20 to prevent DoS attacks with large array indices.
      * Set this to a higher value if your API needs to handle more than 20 array items.
      *
-     * @default 100
+     * @default 30
      * @see https://github.com/ljharb/qs#parsing-arrays
      */
     arrayLimit?: number;