The POST body has exact bytes.

highlighted = computed this step

The body display is readable

The display-words row names the same two fields without pretending to be the exact bytes.

exact body is the hex row\text{exact body is the hex row}
POST body bytesThe body bytes, parsed fields, and length check are recomputed from pinned POST bytes.POST body bytes - POST /submit body 7 bytes, fields a=1 and b=2sectionnamevaluecheckrequest linemethodPOSTparsedrequest linepath/submitparsedrequest lineversionHTTP/1.1parsedheaderHostforms.exampleexactheaderContent-Typeapplication/x-www-form-urlencodedform encodingheaderContent-Length7declared bytesbodydisplay wordsa=1 ampersand b=2safe display formbodyexact hex613d3126623d32pinned bytesbodybyte length7countedfieldaa=1parsedfieldbb=2parsedcheckContent-Length7declaredcheckbody bytes7recomputedcheckmatchyessame count

The body hex is exact

The hex row is recomputed from the bytes after the blank line.

body hex parsed\text{body hex parsed}
POST body bytesThe body bytes, parsed fields, and length check are recomputed from pinned POST bytes.POST body bytes - POST /submit body 7 bytes, fields a=1 and b=2sectionnamevaluecheckrequest linemethodPOSTparsedrequest linepath/submitparsedrequest lineversionHTTP/1.1parsedheaderHostforms.exampleexactheaderContent-Typeapplication/x-www-form-urlencodedform encodingheaderContent-Length7declared bytesbodydisplay wordsa=1 ampersand b=2safe display formbodyexact hex613d3126623d32pinned bytesbodybyte length7countedfieldaa=1parsedfieldbb=2parsedcheckContent-Length7declaredcheckbody bytes7recomputedcheckmatchyessame count

The body has seven bytes

Counting the body bytes gives 7.

body bytes=7\text{body bytes}=7
POST body bytesThe body bytes, parsed fields, and length check are recomputed from pinned POST bytes.POST body bytes - POST /submit body 7 bytes, fields a=1 and b=2sectionnamevaluecheckrequest linemethodPOSTparsedrequest linepath/submitparsedrequest lineversionHTTP/1.1parsedheaderHostforms.exampleexactheaderContent-Typeapplication/x-www-form-urlencodedform encodingheaderContent-Length7declared bytesbodydisplay wordsa=1 ampersand b=2safe display formbodyexact hex613d3126623d32pinned bytesbodybyte length7countedfieldaa=1parsedfieldbb=2parsedcheckContent-Length7declaredcheckbody bytes7recomputedcheckmatchyessame count

Summary

The form body is exact bytes, not hidden client logic.

body bytes checked\text{body bytes checked}
POST body bytesThe body bytes, parsed fields, and length check are recomputed from pinned POST bytes.POST body bytes - POST /submit body 7 bytes, fields a=1 and b=2sectionnamevaluecheckrequest linemethodPOSTparsedrequest linepath/submitparsedrequest lineversionHTTP/1.1parsedheaderHostforms.exampleexactheaderContent-Typeapplication/x-www-form-urlencodedform encodingheaderContent-Length7declared bytesbodydisplay wordsa=1 ampersand b=2safe display formbodyexact hex613d3126623d32pinned bytesbodybyte length7countedfieldaa=1parsedfieldbb=2parsedcheckContent-Length7declaredcheckbody bytes7recomputedcheckmatchyessame count