fix(http_parser): fix chunked size overflow and MediaType.toString quoting

[kevmoo]

Rationale

1. 64-bit chunk size overflow in ChunkedCodingDecoder (_Sink._decode): Chunk sizes were accumulated via _size = (_size << 4) + digit without checking for integer overflow, and chunk body bounds were computed as math.min(end, start + _size). A 16-digit hexadecimal chunk size >= 0x8000000000000000 (or start + _size when start > 0) overflowed signed 64-bit int to a negative index and threw RangeError in Uint8Buffer.addAll instead of FormatException, while 17+ hex digits truncated the declared chunk size.
2. Unescaped backslashes and unquoted empty parameter values in MediaType.toString(): In 4.1.2, _quotedString in scan.dart was tightened to disallow unescaped \ in qdtext, but _escapedChar in media_type.dart remained RegExp(r'["\x00-\x1F\x7F]') (missing \\). Any parameter value containing \ (foo="bar\\baz" or trail="end\\") was serialized without escaping \, corrupting bar\baz to barbaz on re-parse and turning trailing backslashes (trail="end\\") into an unterminated quoted string (trail="end\") that threw FormatException in MediaType.parse(). Empty parameter values (foo="") also failed nonToken.hasMatch("") and serialized as foo=, throwing FormatException on re-parse.

Summary of Changes

• pkgs/http_parser/lib/src/chunked_coding/decoder.dart: Check if (_size > _maxSizeBeforeShift) before accumulating _size = (_size * 16) + digit in _State.size, throwing FormatException('Chunk size is too large.', bytes, start), compute final bytesToRead = math.min(end - start, _size) in _State.body, and remove unused name/toString() members on private enum _State.
• pkgs/http_parser/lib/src/media_type.dart: Add \\ to _escapedChar (RegExp(r'["\x00-\x1F\x7F\\]')) and quote empty parameter values (if (value.isEmpty || nonToken.hasMatch(value))).
• pkgs/http_parser/test/chunked_coding_test.dart, pkgs/http_parser/test/media_type_test.dart, & pkgs/http_parser/CHANGELOG.md: Add regression tests for 64-bit chunk size overflows and MediaType.toString() / MediaType.parse() round-tripping (159 tests passing), and document under 4.1.3-wip.

Verification

• dart analyze --fatal-infos: exit 0
• dart format --output=none --set-exit-if-changed .: exit 0
• dart test -p vm -c source & dart test -p node: exit 0 (159 tests passed)

[github-actions]

PR Health

Coverage ✔️

File	Coverage
pkgs/http_parser/lib/src/chunked_coding/decoder.dart	💚 96 % ⬆️ 3 %
pkgs/http_parser/lib/src/media_type.dart	💚 98 %

This check for test coverage is informational (issues shown here will not fail the PR).

This check can be disabled by tagging the PR with skip-coverage-check.

License Headers ✔️

// Copyright (c) 2026, the Dart project authors. Please see the AUTHORS file
// for details. All rights reserved. Use of this source code is governed by a
// BSD-style license that can be found in the LICENSE file.

Files
no missing headers

All source files should start with a license header.

Unrelated files missing license headers

Files
pkgs/http_multi_server/test/cert.dart

This check can be disabled by tagging the PR with skip-license-check.

Breaking changes ✔️

Package	Change	Current Version	New Version	Needed Version	Looking good?
http_parser	None	4.1.2	4.1.3-wip	4.1.3-wip	✔️

This check can be disabled by tagging the PR with skip-breaking-check.

Unused Dependencies ✔️

Package	Status
http_parser	✔️ All dependencies utilized correctly.

For details on how to fix these, see dependency_validator.

This check can be disabled by tagging the PR with skip-unused-dependencies-check.

API leaks ✔️

The following packages contain symbols visible in the public API, but not exported by the library. Export these symbols or remove them from your publicly visible API.

Package	Leaked API symbol	Leaking sources

This check can be disabled by tagging the PR with skip-leaking-check.

Changelog Entry ✔️

Package	Changed Files

Changes to files need to be accounted for in their respective changelogs.

This check can be disabled by tagging the PR with skip-changelog-check.