結果 : http response header to disable inline javascript