Modules

block header injections in responses