Response headers


PASS getResponseHeader: Expose Access-Control-Expose-Headers (x-custom-header-comma) 
PASS getResponseHeader: Expose second Access-Control-Expose-Headers (x-second-expose) 
PASS getResponseHeader: Don't trim whitespace 
PASS getResponseHeader: x-custom-header bytes 
PASS getResponseHeader: Exposed server field readable (Date) 
PASS getResponseHeader: Cache-Control: readable by default 
PASS getResponseHeader: Content-Language: readable by default 
PASS getResponseHeader: Expires: readable by default 
PASS getResponseHeader: Last-Modified: readable by default 
PASS getResponseHeader: Pragma: readable by default 
PASS getResponseHeader: Server: unreadable by default 
PASS getResponseHeader: X-Powered-By: unreadable by default 
PASS getResponseHeader: Combined testing of cors response headers 
PASS getResponse: don't expose x-nonexposed 
PASS getAllResponseHeaders: don't expose x-nonexposed