Content-Type:text/javascript; charset=UTF-8
X-Content-Type-Options:nosniff