Web 中禁止修改的请求头

https://developer.mozilla.org/en-US/docs/Glossary/Forbidden_header_name

Accept-Charset
Accept-Encoding
Access-Control-Request-Headers
Access-Control-Request-Method
Connection
Content-Length
Cookie
Cookie2
Date
DNT
Expect
Host
Keep-Alive
Origin
Proxy-
Sec-
Referer
TE
Trailer
Transfer-Encoding
Upgrade
Via

A forbidden response-header name is a header name that is a byte-case-insensitive match for one of:

`Set-Cookie`
`Set-Cookie2`