echo "<div>hi</div>" > test.html

curl --trace-ascii /dev/stdout \
    --cookie "_csrf=test" \
    -F csrf=test \
    -F upload=@test.html \
    http://localhost:8080/form

x@x:~/code/echo/main$ curl --trace-ascii /dev/stdout --cookie "_csrf=test" -F csrf=test -F upload=@test.html http://localhost:8080/form
== Info:   Trying 127.0.0.1:8080...
== Info: Connected to localhost (127.0.0.1) port 8080 (#0)
=> Send header, 210 bytes (0xd2)
0000: POST /form HTTP/1.1
0015: Host: localhost:8080
002b: User-Agent: curl/7.74.0
0044: Accept: */*
0051: Cookie: _csrf=test
0065: Content-Length: 299
007a: Content-Type: multipart/form-data; boundary=--------------------
00ba: ----a297ba70c335a0d7
00d0: 
=> Send data, 299 bytes (0x12b)
0000: --------------------------a297ba70c335a0d7
002c: Content-Disposition: form-data; name="csrf"
0059: 
005b: test
0061: --------------------------a297ba70c335a0d7
008d: Content-Disposition: form-data; name="upload"; filename="test.ht
00cd: ml"
00d2: Content-Type: text/html
00eb: 
00ed: <div>hi</div>.
00fd: --------------------------a297ba70c335a0d7--
== Info: We are completely uploaded and fine
== Info: Mark bundle as not supporting multiuse
<= Recv header, 22 bytes (0x16)
0000: HTTP/1.1 201 Created
<= Recv header, 41 bytes (0x29)
0000: Content-Type: text/plain; charset=UTF-8
<= Recv header, 63 bytes (0x3f)
0000: Set-Cookie: _csrf=test; Expires=Wed, 16 Mar 2022 19:00:31 GMT
<= Recv header, 14 bytes (0xe)
0000: Vary: Cookie
<= Recv header, 37 bytes (0x25)
0000: Date: Tue, 15 Mar 2022 19:00:31 GMT
<= Recv header, 19 bytes (0x13)
0000: Content-Length: 4
<= Recv header, 2 bytes (0x2)
0000: 
<= Recv data, 4 bytes (0x4)
0000: test
== Info: Connection #0 to host localhost left intact
test