ApiBase: Always validate that 'limit' is numeric