You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Decode incoming request bodies with gzip, deflate and Brotli through a portable middleware API.
Existing core helpers decode gzip and Brotli streams used by outbound proxy clients. They are not incoming request middleware, and the workspace compression dependency does not enable deflate.
Steps to reproduce
Inspect the current decoders and middleware implementations.
Inspect the async-compression workspace features and compare them with the three requested request encodings.
Expected behavior
Handlers receive decoded request bytes under an explicit middleware/configuration contract, with consistent headers and controlled resource use.
Impact
Compressed uploads require application-specific code, and unbounded decoding would expose applications to excessive expansion.
Proposed fix
Add a bounded incoming decode layer using the existing portable stream types; support all three requested formats and define invalid/unsupported encoding behavior.
Done when
Incoming gzip, deflate and Brotli bodies decode correctly across chunk boundaries.
Malformed/truncated/unsupported encoding behavior is documented and tested.
Decoded-size limits and stream errors are enforced without collecting unbounded output.
Encoding and length metadata are updated consistently before downstream extractors run.
Activity
[-]Request decompression middleware[/-][+]Add request decompression middleware[/+]