PASS: Response header cache-control allowed. PASS: Response header content-language allowed. PASS: Response header content-type allowed. PASS: Response header expires allowed. PASS: Response header last-modified allowed. PASS: Response header pragma allowed. PASS: Response header x-webkit denied. PASS: Non-allowlisted headers not passed to getAllResponseHeaders().