title: How to limit Firebase HTTP/Callable function request size?
body: <p>Can we limit the HTTP/Callable function request size that is coming from the client? I know we can check the request with the function once it arrives but then its too late as we need to download the unwanted request first in order to verify it.</p>
  
  <p><strong>I am wondering if there is a way to prevent malicious users from flooding functions with requests of 10 mb in size.</strong> First I thought I can block the user once I detect invalid request but I can see now even if the user is blocked nothing is stopping the user from calling the function. I can of course prevent this user from accessing backend features but the request is still sent from the client and <strong>I am afraid it may affect the quotas and our bills.</strong> </p>