topic
Verified 2026-09-18Message Framing and Content-Length
Message framing tells a recipient where request or response content ends.
Content-Length describes the content size when known. HTTP/1.1 can also use chunked transfer coding. Never trust conflicting framing fields, and do not forward ambiguous messages.
httpprotocolhttp1security
Reference (http)
Content-Length: 27 Transfer-Encoding: chunked
Content-Length describes the content size when known. HTTP/1.1 can also use chunked transfer coding. Never trust conflicting framing fields, and do not forward ambiguous messages.
Common mistakes
- Accepting conflicting Content-Length and Transfer-Encoding values, a classic request-smuggling risk.