Indeed. The header reads to me as “the server says this content length will be…” so I have always taken precautions with it. Servers can be wrong as well as mal

Indeed. The header reads to me as “the server says this content length will be…” so I have always taken precautions with it. Servers can be wrong as well as malicious.