In my memory of http spec, the boundary can be found at the response header, like: http://www.w3.org/Protocols/rfc1341/7_2_Multipart.html. I can't make sure if we need to do it here. If the boundary is different than the header, the content may be tampered.