Limit request size to Web applications (c cgi versus .net vesus Go) : This is a question regarding basic understanding of a web application.

Although c is poor choice for web application, It is easier for me to ask this question as it relates to c cgi. The same issue might exist with other technologies like .NET/ Go.

I c cgi, when a request comes in, what prevents a malicious user from sending a huge input size for one of the parameter? Is it possibel to drop such a request even before evaluating the size inside of a program? 

Does this happen at the web server level where we can say drop certain request if it is beyond a certain size? If the size of the request parameter is determined using the argv, where does the space get allocated?

In other words, How can we prevent a web application from processing malicious request of big size so the web application does not even allocate space or spend processing. Does this ocur at the application level or the hosting server level.

Thanks,

Kg

----
How can we drop such an request using Go? 

How is it handled in .net?