Fixed XSS vulnarability in decodeHeader function spotted by Joost Pol