Should Content-Type: application/javascript also include a 'charset=...'?

[etnt]

We are running some security scanning tools that are complaining about this. So my question is if perhaps a 'charset=' should be appended to this content type? (the obsoleted 'text/javascript' would of course get a charset since it falls within 'text/*')

[vinoski]

I think that's OK, but I'll need to look into the issue more.