[spec] Requests' size should be checked before transient activation

[marcoscaceres]

trafficstars

Checks for data validity happen mostly at the WebIDL binding layer. As such, we should probably move the requests' size check earlier (before we consume user activation).