From 3ec229ca2707c5f04f1eef638e212367d63edfa8 Mon Sep 17 00:00:00 2001
From: Bryce Kwon <bryce@brycekwon.com>
Date: Sat, 7 Nov 2026 18:06:11 -1000
Subject: Test the clamp on the page offset

---
 tests/t0204-limits.sh | 10 ++++++++++
 1 file changed, 10 insertions(+)

(limited to 'tests')

diff --git a/tests/t0204-limits.sh b/tests/t0204-limits.sh
index fc61b5c..dd9ce68 100755
--- a/tests/t0204-limits.sh
+++ b/tests/t0204-limits.sh
@@ -290,4 +290,14 @@ test_expect_success 'the context a request asks for is clamped' '
 	test_grep "<option value=.3. selected>3<" tmp
 '
 
+# An offset is held between -1, which the stats page sends for every author,
+# and 100000, so a crafted one cannot send the log on a walk over the whole
+# history. Below the floor the index still starts from its first row.
+test_expect_success 'the offset a request asks for is clamped' '
+	cgit_ok limitrc "url=limits/log/&ofs=999999999" >tmp &&
+	test_grep "<a href=./limits/log/?ofs=99950.>\[prev\]</a>" tmp &&
+	cgit_ok limitrc "ofs=-100" >tmp &&
+	test_grep "<a href=./limits/.>limits</a>" tmp
+'
+
 test_done
-- 
cgit 2.12.1