mozilla/fxa-oauth-server — pull request #123 by jrgm (2014-08-17 04:23:23+00:00)
Title: set an overall limit on request size (payload.maxBytes)

I realize that the routes are already length limited by Joi validation rules. This just puts a limit (16384) above those to block abusive requests.