This, and also there is the saying: "Never trust the frontend" So in any case a string length check in the Backend should help here. Also if you get strings fr

This, and also there is the saying: "Never trust the frontend" So in any case a string length check in the Backend should help here. Also if you get strings from a Browser Frontend, it seems unlikely you could create a payload of 2GB due to several reasons, one being string length limitations on the Browser side: https://stackoverflow.com/questions/34957890/javascript-string-size-limit-256-mb-for-me-is-it-the-same-for-all-browsers?noredirect=1&lq=1 https://stackoverflow.com/questions/34957890/javascript-stri...