From 9c8ce1d88c4fee85bf72fca672ea940ed517a4ea Mon Sep 17 00:00:00 2001 From: nmurrell07 Date: Fri, 20 Mar 2026 19:15:55 -0500 Subject: [PATCH] Fix: Allow unlimited query parameters in extended parser The qs library has a default parameterLimit of 1000, which silently truncates query parameters beyond that limit. This can cause data loss when handling requests with many query parameters. Fix by setting parameterLimit: Infinity in the parseExtendedQueryString function, allowing all query parameters to be parsed. Fixes: #5878 --- lib/utils.js | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/lib/utils.js b/lib/utils.js index 4f21e7ef1e3..b2177f7a4c8 100644 --- a/lib/utils.js +++ b/lib/utils.js @@ -266,6 +266,7 @@ function createETagGenerator (options) { function parseExtendedQueryString(str) { return qs.parse(str, { - allowPrototypes: true + allowPrototypes: true, + parameterLimit: Infinity }); }