Fixes unsafe header in XmlHttpRequest object