Return a 400 BadRequest for HEAD and GET requests that include a body (…

…#2360)

This is necessary because the Remix handler throws, causing a 500 error

.changeset/nice-dragons-cry.md

@@ -0,0 +1,5 @@
+---
+'@shopify/remix-oxygen': patch
+---
+
+Return a 400 BadRequest for HEAD and GET requests that include a body

packages/remix-oxygen/src/server.ts

@@ -25,6 +25,14 @@ export function createRequestHandler<Context = unknown>({
   const handleRequest = createRemixRequestHandler(build, mode);
 
   return async (request: Request) => {
+    const method = request.method;
+
+    if ((method === 'GET' || method === 'HEAD') && request.body) {
+      return new Response(`${method} requests cannot have a body`, {
+        status: 400,
+      });
+    }
+
     const context = getLoadContext
       ? ((await getLoadContext(request)) as AppLoadContext)
       : undefined;