enforce length limit when server sends no/short content-length