ZegnatFine if you are sideloading for debugging. Just felt like it should be said that HTTP headers are client-provided-data and you should not normally just echo that always. Means you need to start thinking about XSS and all that crap if it is public-by-default
