Flask and many other frameworks support both multipart/form-data and application/x-www-form-urlencoded in a similar way.
Research whether this could lead to viable vulnerabilities. E.g. what are the differences between multipart/form-data and application/x-www-form-urlencoded? Does either one support something the other doesn't (e.g. max length, character sets, repeated values, case sensitivity).
Check with the standard first to see if there are clear differences at the RFC level, then check with the Flask/Werkzeug code to see if there are any different code paths there.
Flask and many other frameworks support both multipart/form-data and application/x-www-form-urlencoded in a similar way.
Research whether this could lead to viable vulnerabilities. E.g. what are the differences between multipart/form-data and application/x-www-form-urlencoded? Does either one support something the other doesn't (e.g. max length, character sets, repeated values, case sensitivity).
Check with the standard first to see if there are clear differences at the RFC level, then check with the Flask/Werkzeug code to see if there are any different code paths there.