Hacker News Reader

Thanks for noticing this, I fixed it on github. However, it seems that browsers are simply ignoring CRs. So that "\n\n" is enough.

Yeah, I would expect browsers to do a number of non-standard things. It is possible with most of them to construct & send malformed requests.