Validate (limit) user-provided query parameters, e.g. lengths_age

[michaelklishin]

lengths_age and lengths_incr need to be validated and capped the same way page size is.

[essen]

What max values should i put?

[essen]

Nevermind that. If I understand right you want to limit the number of records returned by queries that use those values, not limiting the records themselves? Ie if we request an hour of data with a sample by minutes that's 60, and perhaps we can have a hard limit of samples of 500 or something? Am I understanding right?

[michaelklishin]

Currently it is possible to enter an arbitrarily high number and potentially put a serious strain on the management node. We need to limit our exposure to that.

[essen]

Understood, I can reproduce (even did an OOM, oops). What I was saying in the previous comment should be at least a first step.

[michaelklishin]

Fixed in #106.