Other: Improve input validation for setting HTTP headers

[trishankatdatadog]

What do you want to share with us?

Currently, we are able to set HTTP headers to be sent to the RSTUF API from the CLI. It works, and although users are mostly trustworthy, we just need to be a little bit more careful in parsing them (especially on the server-side). We need to a bit more research into options and libraries here.

References

• https://www.fastly.com/blog/improve-http-structured-headers
• https://github.com/mnot/http-sf

Code of Conduct

• I agree to follow this project's Code of Conduct