rem’s Twitter Archive—№ 50,202

mikewest thought: x-redirect: [allowed | origin | none ] header prevents page from redirecting without user input. Akin to x-frames header.