Fix issue #187

Author: elfman

src/server/server.js

@@ -11,6 +11,7 @@ import requestIp from 'request-ip';
 import stream from 'stream';
 import { getRates as getExchangeRates } from 'services/money';
 import { toJson as xmlToJson } from 'utils/xml2json';
+import qs from 'qs';
 
 // Dome API for topcoder communities
 import tcCommunitiesDemoApi from './tc-communities';
@@ -34,6 +35,8 @@ const app = express();
  * fix. */
 global.atob = atob;
 
+app.set('query parser', str => qs.parse(str, { arrayLimit: 1000 }));
+
 app.use(favicon(path.resolve(__dirname, '../assets/images/favicon.ico')));
 app.use(bodyParser.json());
 app.use(bodyParser.urlencoded({ extended: false }));

src/shared/routes/Communities/ChallengeListing.jsx

@@ -20,7 +20,7 @@ export default function ChallengeListingRoute({ meta }) {
           'containers/challenge-listing/Listing',
         ).then(({ default: ChallengeListing }) => {
           let query = routeProps.location.search;
-          query = query ? qs.parse(query.slice(1)) : {};
+          query = query ? qs.parse(query.slice(1), { arrayLimit: 1000 }) : {};
           const currencyFromUrl = query ? query.currency : undefined;
           const prizeMode = currencyFromUrl && `money-${currencyFromUrl}`;
           return (

src/shared/routes/Topcoder/ChallengeListing.jsx

@@ -20,7 +20,7 @@ export default function ChallengeListingRoute() {
           'containers/challenge-listing/Listing',
         ).then(({ default: ChallengeListing }) => {
           const query = renderProps.location.search ?
-            qs.parse(renderProps.location.search.slice(1)) : null;
+            qs.parse(renderProps.location.search.slice(1), { arrayLimit: 1000 }) : null;
           const currencyFromUrl = _.get(query, 'currency');
           const prizeMode = currencyFromUrl && `money-${currencyFromUrl}`;
           return (

src/shared/services/challenges.js

@@ -116,7 +116,7 @@ class ChallengesService {
         filter: qs.stringify(filters),
         ...params,
       };
-      return this.private.api.get(`${endpoint}?${qs.stringify(query)}`)
+      return this.private.api.get(`${endpoint}?${qs.stringify(query, { arrayLimit: 1000 })}`)
         .then(res => (res.ok ? res.json() : new Error(res.statusText)))
         .then(res => (
           res.result.status === 200 ? {

src/shared/utils/url.js

@@ -19,7 +19,7 @@ import qs from 'qs';
  */
 export function updateQuery(update) {
   if (!window) return;
-  let query = qs.parse(window.location.search.slice(1));
+  let query = qs.parse(window.location.search.slice(1), { arrayLimit: 1000 });
 
   /* _.merge won't work here, because it just ignores the fields explicitely
    * set as undefined in the objects to be merged, rather than deleting such