search

Marak / webservice.js

## Project deprecated, Use flatiron/restful instead
252 stars 24 forks source link

Sanitize JSONP namespace (XSS) #40

Open hugorodrigues opened 12 years ago

hugorodrigues commented 12 years ago

Jsonp is being processed without sanitize the callback value from the user.

To prevent XSS this fix will not run JSONPWRAP if the callback value have any special char's