I'm working with an ISP that has had problems with Form Header Injections. If I use CC WFB are the appropriate protections built in? In other words is it protected against /r /n and similar techniques used by vermin?