Out of the following which can be considered as user input for which validation is not required
Host Header
Cookie
Referrer Header
None of the above