Header injection reproduction

Use /api/probe.