srcDoc Referer leak test

Load this page with a fake secret in the URL, e.g. https://srcdoc-test.noxian.io/?FAKE_SECRET=abc123. Then check /var/log/caddy/beacon.log on the droplet for the Referer of each beacon.