HTTP/1.1 200 OK Date: Mon, 27 Jul 2026 00:34:41 GMT Server: WSGIServer/0.2 CPython/3.14.4 Content-Type: text/plain Content-Length: 53 Content-Disposition: inline; filename="canary_outside.txt" X-Frame-Options: SAMEORIGIN Vary: Accept-Language, origin, Cookie Content-Language: en X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin Set-Cookie: sessionid=76kz4zekt4rz4s32lr3o1akrm2f0ip3m; expires=Mon, 10 Aug 2026 00:34:41 GMT; HttpOnly; Max-Age=1209600; Path=/; SameSite=Lax