http.request: Headers can contain \r and \n

[Sainan]

I'm not quite sure what the appropriate handling here would be, but the current way this data is simply inserted directly into the HTTP request could be problematic if the value is user-controlled.