This bug was fixed in lighttpd 1.4.83 in commit https://git.lighttpd.net/lighttpd/lighttpd1.4/commit/37fe7397bc24c710437bef5f58cda87bd49f3d0b
lighttpd 1.4.85 is in Debian Forky (forky / testing) and Debian Sid (sid / unstable) and contains this fix. As such, I will be sending a message to control to make this as fixed, since there is no reason for this package to be removed from testing when the bug is already fixed in testing. I understand that you would like the bug fixed in stable backports. I plan to get some help from DDs to backport this along with security patches. Cheers, Glenn
