From 71711e6f548bfe0ff0a0c0f1dc440b24259759ee Mon Sep 17 00:00:00 2001
From: "google-labs-jules[bot]"
 <161369871+google-labs-jules[bot]@users.noreply.github.com>
Date: Wed, 7 Oct 2026 04:00:36 +0000
Subject: [PATCH] Fix unbounded request vector in fetch_historical_rates_batch

Co-authored-by: Horizontal42 <75383519+Horizontal42@users.noreply.github.com>
---
 src-tauri/src/main.rs | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src-tauri/src/main.rs b/src-tauri/src/main.rs
index 9a32958..ad31cdc 100644
--- a/src-tauri/src/main.rs
+++ b/src-tauri/src/main.rs
@@ -599,6 +599,9 @@ async fn fetch_historical_rates_batch(
     app: AppHandle,
     dates: Vec<String>,
 ) -> Result<std::collections::HashMap<String, std::collections::HashMap<String, f64>>, String> {
+    if dates.len() > 100 {
+        return Err("too many dates requested".to_string());
+    }
     let mut results = std::collections::HashMap::new();
     let mut missing_dates = Vec::new();