Merge pull request #7966 from nextcloud/backport/7788/stable31

fix: set max comment retrieval limit to 200

Author: grnd-alt

lib/Service/CommentService.php

@@ -40,6 +40,9 @@ public function list(string $cardId, int $limit = 20, int $offset = 0): DataResp
 		if (!is_numeric($cardId)) {
 			throw new BadRequestException('A valid card id must be provided');
 		}
+		if ($limit > 200) {
+			$limit = 200;
+		}
 		$this->permissionService->checkPermission($this->cardMapper, $cardId, Acl::PERMISSION_READ);
 		$comments = $this->commentsManager->getForObject(Application::COMMENT_ENTITY_TYPE, $cardId, $limit, $offset);
 		$result = [];