When invoked with "--remote-header-name" ("-J"), curl fails to preserve its documented anti-clobbering protection if an intermediate 103 Early Hints response precedes the final HTTP response, or if an "ETag" header is processed before "Content-Disposition" under "--etag-save". This flaw allows an HTTP(S) server to overwrite an existing local file specified in the "Content-Disposition" header despite the presence of the "-J" non-overwrite constraint.