Has something changed in the data explorer? Can't get query via API

Falco · March 11, 2026, 5:26pm

FIX: Enforce max limit for data explorer queries (#38320)

main ← fix/data-explorer-limit-security

merged 06:43AM - 06 Mar 26 UTC

Non-admin users with group-level query access could pass `limit=ALL` or an arbit…rarily large integer to bypass the row limit cap on data explorer queries. This commit removes support for the `ALL` value for the `limit` query param since it is unbounded. We consider this a security hardening fix instead of a security flaw since there are many conditions for this code path to be exploited and those conditions are quite rare.

Topic		Replies	Views
Run Data Explorer queries with the Discourse API Integrations data-explorer , how-to , rest-api	14	13402	May 6, 2025
How to change the response default_limit in data explorer? Dev data-explorer	14	1466	November 9, 2023
How to export more than the 10,000 limit? Dev data-explorer	3	992	September 14, 2022
Discourse Data Explorer Plugin official , data-explorer , included-in-core	31	82133	October 22, 2025
API Scope for pulling data explorer queries Feature data-explorer , rest-api , completed	3	750	March 4, 2022

Has something changed in the data explorer? Can't get query via API

Related topics