Newlines / Carriage in header values violate HTTP header spec. Will break HTTP/2

[jimhooker2002]

With headers such as CSP, they tend to be long and hence people naturally break them over multiple lines in config. That then breaks the service as headers with newline/carriage return violate HTTP spec. Seems especially troublesome in HTTP/2.

Attached patch will sanitize the headers and remove the offending characters.

patchfile.txt

(Sorry about the patchfile, didn't have permissions to create a branch and PR etc. The fix is very simple however.)