Express query parser depth and pagination limit enforcement
Goal is to bound query string input and enforce safe pagination defaults for large dataset endpoints in Express 4.x and 5.x. Body parser limit configuration caps request body size but does not apply to query string parameters. The default query parser uses qs with a depth limit and no size limit, and Express does not provide a built-in way to cap the number
express