Regardless of the quality of this post, the author does highlight a security issue here. The RFC states that it's up to the parser to define the limits and diff

Regardless of the quality of this post, the author does highlight a security issue here. The RFC states that it's up to the parser to define the limits and different parsers may behave differently in the face of malicious inputs. That's why you should probably test them...