Comment by _jomo

Comcast has even published an informational RFC describing how to inject crap into HTTP requests:

https://tools.ietf.org/html/rfc6108