Start refusal: read headers only so the 4 KiB body bound limits the read #80

Merged
heimdall merged 2 commits from heimdall/start-refusal-headers-only into main 2026-11-12 14:54:30 +00:00

2026-11-12

Heimdall
Start refusal: a client timeout in the body read still redirects; user cancellation propagates
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
2026-11-12 14:54:19 +00:00
Heimdall
Start refusal: read headers only so the 4 KiB bound limits the read; narrow the swallow to non-cancellation
Soul re-pass on 87a1bb6b: PostAsJsonAsync buffered the whole body before the cap applied. Test renamed to say what it pins.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
2026-11-12 14:48:35 +00:00