CORS, CSP, security headers, redirects, cache — analyzed, graded, and explained.

curl -s xhttp.lol/github.com | jq