flightofthefox·قبل 4 سنوات·discussSolution seems funky. Attackers could just omit the Content-Length header