Block redirects to scripts over XMLHttpRequest and fetch
Currently we don't allow redirects to scripts if the type of the request is
script. It is however possible to load a script using
fetch. In such cases, if the request is redirected, the redirect could either be blocked or avoided by looking at the MIME type of the response.
What to change