Fiber 2.52

Apply the Go 1.27 prompt first, then these rules to the Fiber 2.52 line of github.com/gofiber/fiber/v2; they were checked against 2.52.15. The module requires Go 1.20 or later; use a supported patched toolchain. Fiber uses fasthttp, so apply the HTTP limits and cancellation principles from the baseline through the Fiber and fasthttp APIs below; configuring an unrelated net/http.Server or http.Client does not protect this stack.

Application configuration and request limits

• Set positive ReadTimeout, WriteTimeout, and IdleTimeout in fiber.Config. Read and write timeouts default to unlimited; a zero idle timeout inherits ReadTimeout. These connection deadlines do not cancel handler work.
• Set an application-wide BodyLimit appropriate to the largest accepted request; its default is 4 MiB. Enforce smaller endpoint limits before binding. Size Concurrency and ReadBufferSize deliberately: their defaults are 262144 connections and 4096 bytes, and the read buffer limits request headers and URI size across the server, not per route group.
• Keep StreamRequestBody disabled unless handlers bound reads from c.Request().BodyStream(). Streaming can deliver bodies larger than BodyLimit; enforce total bytes and multipart limits while reading, and avoid materializing the stream through Body, BodyRaw, or BodyParser first.
• Set DisablePreParseMultipartForm: true when authentication or custom limits must precede multipart parsing; otherwise fasthttp can parse before middleware runs. Bound part count, file sizes, and aggregate size before SaveFile or