Include query-string in <link rel="self">
Remove X- from custom header, following RFC 6648
Allow cross-domain GET requests
Implement jurisdiction, severity filters