CRs aren't allowed inside commands; however that doesn't preclude lenient servers from forwarding such messages from malicious users. Better be safe and remove them