Is there a maximum content length of the POST body in webhooks after which dropbox will chunk and make multiple webhooks. We are trying to see what the maximum size we can set on our side before rejecting the request to prevent any DOS attacks. Even though we can verify that dropbox is the one who made the post with the signature, we still have to read the body fully before verify signature.
Any other checks we can add on our side to prevent DOS attacks, like sender IP range etc?
Thanks,