article
Shared JSON reader started waving empty requests through
A dozen copy-pasted body parsers were replaced with one reader. Broken JSON now gets one clean 400, but the order of its checks turned away body-free deletes and let empty bodies pass the array guards.
Read more 4m read