fix: cap unbounded endpoint picker queries in DashboardController

app/Http/Controllers/DashboardController.php

@@ -88,7 +88,11 @@ public function events(Request $request): Response
 
         return Inertia::render('Events/Index', [
             'events' => $events,
-            'endpoints' => $request->user()->endpoints()->get(['id', 'name', 'url', 'description', 'is_active']),
+            'endpoints' => $request->user()->endpoints()
+                ->select(['id', 'name', 'url', 'description', 'is_active'])
+                ->orderBy('name')
+                ->limit(500)
+                ->get(),
             'eventTypes' => $eventTypes,
             'filters' => $request->only(['search', 'type']),
         ]);
@@ -99,7 +103,11 @@ public function editEvent(Request $request, Event $event): Response
         abort_if($event->user_id !== $request->user()->id, 404);
 
         $event->load('endpoints');
-        $endpoints = $request->user()->endpoints()->get();
+        $endpoints = $request->user()->endpoints()
+            ->select(['id', 'name', 'url', 'description', 'is_active'])
+            ->orderBy('name')
+            ->limit(500)
+            ->get();
 
         return Inertia::render('Events/Edit', [
             'event' => $event,

tests/Feature/DashboardEventsEndpointsPickerLimitTest.php

@@ -0,0 +1,47 @@
+<?php
+
+namespace Tests\Feature;
+
+use App\Models\Endpoint;
+use App\Models\Event;
+use App\Models\User;
+use Illuminate\Foundation\Testing\RefreshDatabase;
+use Tests\TestCase;
+
+class DashboardEventsEndpointsPickerLimitTest extends TestCase
+{
+    use RefreshDatabase;
+
+    public function test_events_index_caps_the_endpoint_picker_list(): void
+    {
+        $user = User::factory()->withPersonalTeam()->create();
+
+        Endpoint::factory()->for($user)->count(501)->create();
+
+        $response = $this->actingAs($user)->get(route('events'));
+
+        $response->assertOk();
+        $response->assertInertia(
+            fn ($page) => $page
+                ->component('Events/Index')
+                ->has('endpoints', 500)
+        );
+    }
+
+    public function test_edit_event_caps_the_endpoint_picker_list(): void
+    {
+        $user = User::factory()->withPersonalTeam()->create();
+        $event = Event::factory()->for($user)->create();
+
+        Endpoint::factory()->for($user)->count(501)->create();
+
+        $response = $this->actingAs($user)->get(route('events.edit', $event));
+
+        $response->assertOk();
+        $response->assertInertia(
+            fn ($page) => $page
+                ->component('Events/Edit')
+                ->has('endpoints', 500)
+        );
+    }
+}