The public user follow-list endpoints parse pagination params without guarding non-positive limits or negative offsets.\n\nAffected routes:\n- GET /api/users/[username]/followers\n- GET /api/users/[username]/following\n\nExamples:\n- limit=0 or a negative limit can produce an invalid Supabase range where the end index is before the start index.\n- offset=-10 is passed directly to .range(), producing a negative start index.\n\nBoth endpoints should fall back to a positive default limit, preserve the existing max limit, and clamp negative offsets to 0.
The public user follow-list endpoints parse pagination params without guarding non-positive limits or negative offsets.\n\nAffected routes:\n- GET /api/users/[username]/followers\n- GET /api/users/[username]/following\n\nExamples:\n- limit=0 or a negative limit can produce an invalid Supabase range where the end index is before the start index.\n- offset=-10 is passed directly to .range(), producing a negative start index.\n\nBoth endpoints should fall back to a positive default limit, preserve the existing max limit, and clamp negative offsets to 0.