tree bd21103b535e3375e2e91aa789d1dd8aa0d13f4e
parent 12790af93730924f04993d25bd232a5ff6a58d76
author Maxim Dounin <mdounin@mdounin.ru> 1624892466 +0300
committer Maxim Dounin <mdounin@mdounin.ru> 1624892466 +0300

Disabled requests with both Content-Length and Transfer-Encoding.

HTTP clients are not allowed to generate such requests since Transfer-Encoding
introduction in RFC 2068, and they are not expected to appear in practice
except in attempts to perform a request smuggling attack.  While handling of
such requests is strictly defined, the most secure approach seems to reject
them.