Start adding tests for security headers and inline scripts/styles.