Check transfer encoding to prevent JS injection in binary