HUMAN VERIFICATION REQUIREDASVS 4.2.2 Correct Content-Length generation
MB-C18ASVS Level 3 Human AssuranceHigh
When generating HTTP messages, the Content-Length header field does not conflict with the length of the content as determined by the framing of the HTTP protocol, in order to prevent request smuggling attacks.