diff --git a/webapp/controller/MarketController.class.php b/webapp/controller/MarketController.class.php
index 58847c27..c36b64c9 100644
--- a/webapp/controller/MarketController.class.php
+++ b/webapp/controller/MarketController.class.php
@@ -1295,7 +1295,7 @@ class MarketController extends BaseAuthedController
         $type = getReqVal('type', 0);
         $start = getReqVal('start', 0);
         $page_size = getReqVal('page_size', 10);
-
+        $page_size = max(1, min(100, $page_size));
         $conn = myself()->_getMarketMysql('');
 
         $type_filter_fn = function ($f) {