• [security fix] prevent excessive CPU use when parsing malformed chunk-size lines (Robert Rothenberg)
  
• [security fix] bound read allocations for large Content-Length values (Robert Rothenberg)
  
• suppress response bodies for HEAD requests and 204/304 responses (Robert Rothenberg)
  
• [security fix] stream chunk data to the body buffer and limit chunk-size lines to 4096 bytes (Robert Rothenberg)