Set minimum/maximum limit for `POST` endpoint that accept many data

[bdrhn9]

• Don't accept array with length 0, return error status code. You can use this error code to ban client in future.
• Set maximum length for array to accept. It'd be better to be an environment variable to change it in production if necessary.