Malformed Input

Malformed Input Handling

These tests send pathological, oversized, or completely invalid payloads to verify the server handles them gracefully — rejecting with an appropriate error status rather than crashing, hanging, or consuming unbounded resources.

A well-implemented server should respond with 400 Bad Request, 414 URI Too Long, or 431 Request Header Fields Too Large depending on the violation, or simply close the connection.