CORS Tests
X-Frame-Options Tests
CSP tests (limited)