The client reserved what Content-Length claimed, up to payload_max_length, before any of the body arrived, and without a limit nothing bounded it. Reserve at most 1 MiB up front and let a longer body grow as it is read.