Hi I'm trying to run the Http splitting lesson on OS X, but can't inject the %0a characters. I copied the inject strings from the solution, either with %0d%0a or %0a and I can't get the alert message. Would anyone have a hint? Is it due to additional protection added to FF or OS X? Thanks Jean-Noel Colin