I usually do not let any header through the CDNs. I need to try this attack out on some of our infra, not sure if any of those are affected if you have tight he

I usually do not let any header through the CDNs. I need to try this attack out on some of our infra, not sure if any of those are affected if you have tight header policy.