AJAX Content-length Problem

[DD-Stylz]

Guten Tag,

ich bekomme folgende Fehlermeldung:

Refused to set unsafe header "Content-length"
Refused to set unsafe header "Connection"

die Funktion sieht wiefolgt aus:

function freeUser(input,freeButton,deleteButton,userID,undergroundID) {
    var xmlhttp=GetXmlHttpObject();
    if(isNaN(parseFloat(input.value))) {
        input.style.background = '#ff3118';
        alert("Fehler bei ´User Freischalten´.","Die **** muss Numerisch sein.", { width:300 });
    } else {
        if(input.value.length > 6) {
            input.style.background = '#ff3118';
            alert("Fehler bei ´User Freischalten´.","Die *****darf maximal 6 Zeichen lang sein.", { width:250 });
        } else {
            if (xmlhttp==null) {
                alert ("Your browser does not support AJAX!");
                return;
            }
            var url="****";
            var param="undergroundID="+undergroundID+"&userID="+userID+"&****="+input.value;
            xmlhttp.onreadystatechange= function() {
                if (xmlhttp.readyState==4 || xmlhttp.readyState=="complete") {
                    var res=xmlhttp.responseText;
                    if(res) {
                        alert("Fehler bei ´User Freischalten´.","Die **** ist ok.", { width:300 });
                        //document.getElementById('hofTable').innerHTML=res;
                    } else {
                        alert("Fehler bei ´User Freischalten´.","Es tratt ein Fehler auf.", { width:300 });
                    }
                }
            }
            xmlhttp.open("POST",url,true);
            xmlhttp.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
            xmlhttp.setRequestHeader("Content-length", param.length);
            xmlhttp.setRequestHeader("Connection", "close")
            xmlhttp.send(param);
        }
    }
}


function GetXmlHttpObject() {
    var xmlhttp=null;
    try {
        // Firefox, Opera 8.0+, Safari
        xmlhttp=new XMLHttpRequest();
    } catch (e) {
        // Internet Explorer
        try {
            xmlhttp=new ActiveXObject("Msxml2.XMLHTTP");
        } catch (e) {
            xmlhttp=new ActiveXObject("Microsoft.XMLHTTP");
        }
    }
    return xmlhttp;
}

*alert ist in diesem Fall keine Standard JS-Funktion*

Ich vermute es hat mit dem Content-length zu tun , kann mir jemand sagen woran es liegt?

Danke,

 

[mermshaus]

Refused to set unsafe header "Content-length"
Refused to set unsafe header "Connection"

Messing around with those could expose various request smuggling attacks, so the browser always uses its own values. There's no need or reason to try to set the request length, as the browser can do that accurately from the length of data you pass to send()

- javascript - WebKit "Refused to set unsafe header 'content-length'" - Stack Overflow