CSR and Mozilla - Clarifying HTTP Header Filtering

I've read some threads that lead to me think that the Mozilla plan is
to block certain HTTP Headers in their implementation of CSR. I can't
find any details on this and would like some clarification.

What, if any, HTTP Headers are going to be disallowed? Is this for all
HTTP Methods?

-- 
mca
http://amundsen.com/blog/