Limit community auth usersearch to 100 results
authorMagnus Hagander <magnus@hagander.net>
Tue, 21 Feb 2023 13:56:03 +0000 (14:56 +0100)
committerMagnus Hagander <magnus@hagander.net>
Tue, 21 Feb 2023 13:56:27 +0000 (14:56 +0100)
Avoids huge resultsets and we should never deal with searches bigger
than this anyway.

pgweb/account/views.py

index ddb4484a77f1e31a00bc56aa2d1632e387c86f8b..3c12b8693da3740d641fd5ba2d1a32a1334488e0 100644 (file)
@@ -802,7 +802,7 @@ def communityauth_search(request, siteid):
     else:
         raise Http404('No search term specified')
 
-    users = User.objects.prefetch_related(Prefetch('secondaryemail_set', queryset=SecondaryEmail.objects.filter(confirmed=True))).filter(q)
+    users = User.objects.prefetch_related(Prefetch('secondaryemail_set', queryset=SecondaryEmail.objects.filter(confirmed=True))).filter(q)[:100]
 
     j = json.dumps([{
         'u': u.username,