remove disallowed params

app/controllers/list_controller.rb

@@ -286,6 +286,11 @@ class ListController < ApplicationController
     options[:topic_ids] = param_to_integer_list(:topic_ids)
     options[:no_subcategories] = options[:no_subcategories] == 'true'
     options[:slow_platform] = slow_platform?
+    options.delete(:per_page)
+    options.delete(:limit)
+    options.delete(:except_topic_ids)
+    options.delete(:visible)
+    options.delete(:no_definitions)
 
     options
   end