hdrtest

host: demo.devinlab.com

mode: xfo-sameorigin

switch mode

none xfo-deny xfo-sameorigin csp-other csp-fa-none both custom

pages

/page | /echo | /_ctl | /embed?url=/page

response headers seen by same-origin fetch

loading...