The root cause of the error is while requesting the resource config.js we’re settings the header to Accept: ‘text/javascript’. All browsers accept the header text/javascript but external security modules may only accept application/javascript header.
This allowed me to find fix for error…
I have access to IIS server so changed the MIME option on the wordpress website so that .js record was text/javascript rather than application/javascript.
There is a change that this will stop other js from working but if it does I figure that I can get access to fix settings and then chance MIME record back to stop any other js breaking.