I put a fix for this (and any other possible strange http request) in the 1.1 branch of code. While thickbox is the culprit this time, It’s possible there could be other culprits later. If you NEED to use thickbox and are comfortable using branch code, it’s in there for future versions.
