var path = require('path');

module.exports = {

  one: function (req, res) {
/* vcl:
vcl 4.0; backend default { .host = "www.vclfiddle.net"; .port = "80"; }

sub vcl_backend_response {
  if (beresp.http.Content-Type ~ "^image/") {
    set beresp.http.Cache-Control = "public, max-age=300";
    set beresp.ttl = 300s;
  }
}
*/
/* curl:
curl "http://www.vclfiddle.net/example/one"
*/
    req.session = null; // don't send Set-Cookie: sails.sid=
    return res
      .header('Link', '<https://www.flickr.com/photos/crazymandi/8165527856/>; rel=alternate')
      .header('Cache-Control', 'public, max-age=0')
      .sendfile(path.join(__dirname, 'flickr-crazymandi-puppy.jpg'));
  }

}
@@ -669,14 +669,347 @@
 jpg'));%0A
+  %7D,%0A%0A  two: function (req, res) %7B%0A/* vcl:%0Avcl 4.0; backend default %7B .host = %22www.vclfiddle.net%22; .port = %2280%22; %7D%0A%0Asub vcl_deliver %7B%0A  unset resp.http.Server;%0A  unset resp.http.X-Powered-By;%0A%7D%0A*/%0A/* curl:%0Acurl %22http://www.vclfiddle.net/example/two%22%0A*/%0A    return res.send('Where are the Server and X-Powered-By response headers?');%0A
   %7D%0A%0A%7D

Add example two: remove information leaking response headers