Header parsing is now safe by default.