Hacker News Reader

What's wrong with it? It seems reasonable to protect yourself from header-injections allowed by a downgrade?

Am I misunderstanding?

I don't think there's anything wrong with it, it's great advice!