set content range header when fetching source, to prevent DOS attacks