Spider: Don't follow redirects with empty Location header
os_cmd_injection_timing: added a ping-based payload