| PASS XMLHttpRequest: setRequestHeader() - headers that are allowed (Authorization) | |
| PASS XMLHttpRequest: setRequestHeader() - headers that are allowed (Pragma) | |
| PASS XMLHttpRequest: setRequestHeader() - headers that are allowed (User-Agent) | |
| PASS XMLHttpRequest: setRequestHeader() - headers that are allowed (Content-Transfer-Encoding) | |
| PASS XMLHttpRequest: setRequestHeader() - headers that are allowed (Content-Type) | |
| PASS XMLHttpRequest: setRequestHeader() - headers that are allowed (Overwrite) | |
| PASS XMLHttpRequest: setRequestHeader() - headers that are allowed (If) | |
| PASS XMLHttpRequest: setRequestHeader() - headers that are allowed (Status-URI) | |
| PASS XMLHttpRequest: setRequestHeader() - headers that are allowed (X-Pink-Unicorn) | |
| PASS XMLHttpRequest: setRequestHeader() - headers that are allowed (!#$%&'*+-.^_`|~0123456789abcdefghijklmnopqrstuvwxyz) | |