dangerous response header field: Location: javascript: unknown response header field: REMOVED-foo: foo unknown response header field: bar: bar invalid response header field: refresh: foo HTTP/1.0 200 OK REMOVED-Location: javascript: Content-Type: text/plain REMOVED-foo: foo REMOVED-bar: bar