Could you explicitly clarify here that this has been done for testing purposes only, and in production environments, the http_x_allow_beacon approach should not be followed? I do hope developers don't directly copy over these snippets from the test file. @jeffkaufman, is this fine?