Fixed header injection in uri