Posted by Ron E on Aug 26WatsonWebserver contains an HTTP/1 request body size-limit bypass when processing requests using Transfer-Encoding: chunked. The framework's configured Settings.IO.MaxRequestBodySize limit is enforced when a request declares its body size using Content-Length. However, requests using chunked transfer encoding are processed through a separate body-reading path that accumulates decoded chunks into a MemoryStream without enforcing the same...