https://www.securitynewspaper.com/2016/06/17/advisory-http-header-injection-python-urllib/