HTTP Header Injection and SSRF Patterns