fixup! perf(@angular/ssr): avoid buffering request body when sanitizing headers

Author: alan-agius4

packages/angular/ssr/test/utils/validation_spec.ts

@@ -494,12 +494,10 @@ describe('Validation Utils', () => {
       expect(secured.headers.get('forwarded')).toBe('host=proxy.com;proto=https');
     });
 
-    it('should not tee request body and should preserve abort signal when removing unallowed headers', async () => {
-      const controller = new AbortController();
+    it('should transfer request body without teeing when removing unallowed headers', async () => {
       const req = new Request('http://example.com', {
         method: 'POST',
         body: 'test body',
-        signal: controller.signal,
         headers: {
           'host': 'example.com',
           'x-forwarded-host': 'evil.com',
@@ -508,8 +506,24 @@ describe('Validation Utils', () => {
 
       const secured = sanitizeRequestHeaders(req, normalizeTrustProxyHeaders(undefined));
 
+      // In the Fetch specification, calling `request.clone()` tees the body stream and leaves
+      // `req.bodyUsed` as `false`. Passing `req` directly to `new Request(req, ...)` transfers the
+      // underlying stream without teeing, immediately marking `req.bodyUsed` as `true`.
       expect(req.bodyUsed).toBeTrue();
       expect(await secured.text()).toBe('test body');
+    });
+
+    it('should preserve abort signal when removing unallowed headers', () => {
+      const controller = new AbortController();
+      const req = new Request('http://example.com', {
+        signal: controller.signal,
+        headers: {
+          'host': 'example.com',
+          'x-forwarded-host': 'evil.com',
+        },
+      });
+
+      const secured = sanitizeRequestHeaders(req, normalizeTrustProxyHeaders(undefined));
 
       controller.abort();
       expect(secured.signal.aborted).toBeTrue();