Prevent UTF-7 XSS attacks in IE7 by forcing charset before page title