Posted by Ron E on Aug 26 WatsonWebserver contains an HTTP/1 request body size-limit bypass when

processing requests using Transfer-Encoding: chunked.

The framework's configured Settings.IO.MaxRequestBodySize limit is enforced

when a request declares its body size using Content-Length. However,

requests using chunked transfer encoding are processed through a separate

body-reading path that accumulates decoded chunks into a MemoryStream

without enforcing the same...