On Fri, Sep 11, 2015 at 4:04 AM, Gaudenz Steinlin <gaud...@debian.org> wrote: > I fail to see how this is a security issue.
Please see https://www.owasp.org/index.php/HTTP_Response_Splitting for an explanation about HTTP header manipulation attacks. - Ken
