Comment by IshKebab

> disabling the progress-something-flag and (optionally...) disabling multipart-uploads would have nicely mitigated this.

I wouldn't be so sure. Many vulnerabilities have been "fixed" by blocking the particular ingress path of the demo exploit, and then it turns out that there were plenty more ways to exploit the bug, they just picked the easiest one.