CGI does allow arbitrary HTTP headers.