2 ms·

At least HTTP/2 pretty much kills request smuggling (assuming there's no downgrading behind the scenes)