Over from Slack. We'd need to check if Kitura-NIO is vulnerable to the HTTP smuggling attack described here.