[Bug 1078298] VUL-1: CVE-2016-10711 Pound: request smuggling via crafted headers