It is not safe to read all stream body to memory without a max size limit.

[Quons]

fasthttp/http.go

Line 427 in 57b9352

_, err := copyZeroAlloc(bodyBuf, req.bodyStream)

I think it would be safe to stop reading the request body into memory and return an error when it exceeds the maximum request body size. Otherwise, it may lead to an out-of-memory (OOM) error when the request body is too large.

[erikdubbelboer]

Users using body streaming on the server side should use Request.BodyStream() to get an io.Reader and read as much as they need. It's not recommended to to call Request.Body() to then get the full body. I agree that we should probably maybe do something here to prevent this. I'm open to a pull request or suggestion on how to fix this.