Bug ZK-2464: Possible XSS Vulnerability in HTTP Header