code: public static String stripMaliciousHeaderChars(String input) 
      {
          for (char c : MALICIOUS_HEADER_CHARS) {
              input = StringUtils.remove(input, c);
          }
          return input;
      }
docs: Ensure decoded new lines are not propagated in headers, in order to prevent XSS
  
  @param input - decoded header string
  @return - clean header string