This doesn't explain why he decided to WONTFIX what is obviously a parser bug that allows injection of data into output through the headers. But werner at this

This doesn't explain why he decided to WONTFIX what is obviously a parser bug that allows injection of data into output through the headers. But werner at this point has a history of irresponsible decisions like this, so it's sadly par for the course by now. Another particularly egregious example: https://dev.gnupg.org/T4493 https://dev.gnupg.org/T4493