header-injection

From README

HTTP Header Injection Security Check (CWE-113) What this checks Protects against HTTP response header injection where user input containing CR/LF characters is included in response headers, allowing attackers to inject arbitrary headers or split the HTTP response. Exploitation leads to cache poisoning, session fixation, XSS via injected headers, and response splitting. Vulnerable patterns Response header value set directly from a request parameter with no CR/LF stripping Content-Disposition filename interpolated from user input without normalization Location redirect header built from a caller-supplied URL with no validation Forwarded request header (correlation ID, user agent, custom header) echoed into an outgoing response without sanitization Email or SMTP header value built from form input without rejecting newline characters Fix immediately Flag the vulnerable code and explain the risk.