Denial of service via excessive header count

A handshake carrying tens of thousands of headers is parsed in full before any limit is enforced, exhausting the heap on a small instance.

SyntheticThis advisory is invented for the demonstration. ws is a real package; nothing described here has been reported against it.