net/http: reject bare LF in chunked encoding [1.24 backport]

[gopherbot]

@neild requested issue #71988 to be considered for backport to the next 1.24 minor release.

@gopherbot please open backport issues for this security fix.

[gopherbot]

Change https://go.dev/cl/657056 mentions this issue: [release-branch.go1.24] net/http: reject newlines in chunk-size lines

[gopherbot]

Closed by merging CL 657056 (commit ac1f5aa) to release-branch.go1.24.