Description of problem: Neon does not apply a sanity limit to propfind responses. Neon should apply a limit in order to prevent memory exhaustion by a hostile DAV server.
Yes, thanks, known issue. I'm working towards fixing this for neon 0.25.x.
This is done for neon 0.25, backporting to 0.24.x is hard because it requires a couple of API changes to do properly, so it will have to wait.