| PASS | Setting withCredentials on a sync XHR object should not throw | |
| PASS | Don't send cookie by default | |
| PASS | Don't send cookie part 2 | |
| PASS | Don't obey Set-Cookie when withCredentials=false | |
| PASS | Access-Control-Allow-Credentials: TRUE should be disallowed (async) | |
| PASS | Access-Control-Allow-Credentials: True should be disallowed (async) | |
| PASS | Access-Control-Allow-Credentials: "true" should be disallowed (async) | |
| PASS | Access-Control-Allow-Credentials: 'true' should be disallowed (async) | |
| PASS | Access-Control-Allow-Credentials: false should be disallowed (async) | |
| PASS | Access-Control-Allow-Credentials: 1 should be disallowed (async) | |
| PASS | Access-Control-Allow-Credentials: 0 should be disallowed (async) | |
| PASS | Access-Control-Allow-Credentials: ,true should be disallowed (async) | |
| PASS | Access-Control-Allow-Credentials: true, should be disallowed (async) | |
| PASS | Access-Control-Allow-Credentials: true%0B should be disallowed (async) | |
| PASS | Access-Control-Allow-Credentials: true%0C should be disallowed (async) | |