TunnelProxy uses Content-Length; the backend uses chunked encoding. Smuggle a request prefix to poison the next victim.
