User agent validation

Adaptive does not validate user agent. This leads to header/request injection vulnerability.

Same bug as 8 years ago all over again (see 2656ae56).

(Have not checked other inputs.)

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information