The multipart parser had counted the extension’s normal envelope as if it exceeded the allowed number of parts. Its limits now match the reviewed request exactly.
One image, the selected destination, and a source URL up to 2,048 characters are accepted.
The existing six-megabyte image ceiling and secure decoder remain unchanged.
Extra files, fields, or multipart sections still fail closed.