"Dice 2k25": Bypassing a Length Check via qs Array Parsing and JavaScript Type Coercion

I send number[]=1000000000 to trick Express's qs parser into producing an array that passes a length check and coerces to the target number.