HTTP compatibility defaults and hardening flags

Open with ?flags=1 to enable scopeHeaders and strictRedaction.

Global headers, cross-origin GET

Global headers, same-origin GET

Request interceptor URL

Response interceptor headers

Custom CSRF header

fetch:error payload

Request bodies

Dot-segment in URL path