3 ms·
The HTTP spec does say though: in HTTP/1.1, the HTTP body length is the value of the content-length header. Anything else coming on the wire is part of the next
by tsimionescu 3y ago
The HTTP spec does say though: in HTTP/1.1, the HTTP body length is the value of the content-length header. Anything else coming on the wire is part of the next HTTP request/response (which may of course be invalid). Reading everything from the stream until the connection is closed is HTTP/1.0 behavior.
Of course, if the UEFI HTTP client is not correctly implementing the spec, it's up to shim to defend itself, so I'm not saying this change is wrong or unnecessary.