-server HEAD http://foo -allow javascript