Go net/HTTP: invalid headers are normalized, allowing request smugglinggithub.com/golang2 pointslaumars7 years ago