Defend against same origin XSS
Improve content-type matcher
Merge pull request #196 from reed/xss-defense

Defend against same origin XSS