Hmm… this is interesting. I got a message in my spam filter from “8441 [@] nokrev.com” (ha, stupid catch-all), with this message:
It looks like they were trying to do some sort of header injection technique, and Django caught it (it does have automatic protection against said hack).
Do you think it was testing a vulnerability?
