Javascript Http Response Splitting Attack