Tighten XMLHttpRequest setRequestHeader value check