HTTP/1.1 200 OK Date: Mon, 27 Jul 2026 00:31:10 GMT Server: WSGIServer/0.2 CPython/3.14.4 Content-Type: text/plain Content-Length: 53 Content-Disposition: inline; filename="canary_outside.txt" X-Frame-Options: SAMEORIGIN Vary: Accept-Language, origin, Cookie Content-Language: en X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin Set-Cookie: sessionid=jpjiyh3tef1ms5r3qfwzwvr7qlvkrnru; expires=Mon, 10 Aug 2026 00:31:10 GMT; HttpOnly; Max-Age=1209600; Path=/; SameSite=Lax