More testcases (style); more CSP-type headers get stripped