limit the results of a query server side

Question

I would like to know how to limit a query (server side. My knowledge is Meteor). For example, the comments of a particular post instead of retrieving all the comments in database.

I want it to be limited server side to avoid malicious client to fetch all the data of the database.

Thanks.

score 0 · Answer 1 · answered Aug 28 '15 at 19:53

0

You could use limit. For example: post.comments.limit(10)

answered Aug 28 '15 at 19:53

heri

11
1
3

yes, but then a malicious client could do a `post.comments.limit(100000)`, for example. – miguel.alarcos Aug 29 '15 at 19:02

score 0 · Accepted Answer · answered Sep 01 '15 at 20:41

0

I think we talked about this in gitter, but I'm planning to add a query_restrictions api where you can reject queries that you don't like. I'll probably add a default globally configurable limit also. (that you can override on a per model basis)

answered Sep 01 '15 at 20:41

Ryan

956
7
8

limit the results of a query server side

2 Answers2