When requesting an url with method HEAD not only the headers but also the resource is returned.
*** This bug has been marked as a duplicate of 3812 ***
Looks like HEAD is special, and may not just work after bug 3812 is fixed. Reopening.
This was fixed, after an underlying OS bug was fixed.