Support X-XSS-Protection: report=URL header syntax in XSSAuditor.