CORS cache-poisoning harness

This page is served from and issues a cross-origin XHR to https://corsdlc.52dayday.com/sim/mode.json.

idle