Go net/HTTP: invalid headers are normalized, allowing request smuggling | Heykuki News