@rafaelfranca You'll only get those Content-Type if you manually specify them with `render ..., type: 'application/ecmascript'`. `Mime::JS` will always be `text/javascript`.

We may want a whitelist to extend verification to other Content-Type (including JSON for those supporting ancient browsers) in the future, but I don't think it's necessary to start.