Bug Fixes

• http1:
  • reject content-lengths that have a plus sign prefix (06335158) (Security GHSA-f3pg-qwvg-p99c)
  • protect against overflow in chunked decoder (efd9a982) (Security GHSA-5h46-h7hh-c6x9)

Features

• ffi: add option to get raw headers from response (8c89a8c1)