jshttp On Headers Vulnerabilities