What is a common mistake with pagination, filtering, and sorting in Web API?

Unbounded list endpoints or arbitrary sort fields can create performance and security issues.