v25 LTS security patch

[ahopkins]

• cleanup CRLF header injection
• resolve chunked trailer request smuggling
• limit inspector to public methods
• reject requests where url_bytes exceeds 65535

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 87.745%. Comparing base (d9738d8) to head (4db4279).

Additional details and impacted files

@@              Coverage Diff               @@
##           25.12LTS     #3164       +/-   ##
==============================================
- Coverage    87.817%   87.745%   -0.073%     
==============================================
  Files           105       105               
  Lines          8143      8152        +9     
  Branches       1290      1291        +1     
==============================================
+ Hits           7151      7153        +2     
- Misses          686       693        +7     
  Partials        306       306               

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.