[response-headers.htm]
  type: testharness
  [getResponseHeader: Expose Access-Control-Expose-Headers (x-custom-header-comma)]
    expected: FAIL

  [getResponseHeader: Combined testing of cors response headers]
    expected: FAIL

  [getResponse: don't expose x-nonexposed]
    expected: FAIL