This header suffers from a CORS bug. Search for other uses of Content-Length in the runtime.js file to see how to work around it.