Check if TM TBot Json pages is affected by the subtle JSon hijacking vulnerabiltiy

[DinisCruz]

See these posts for more details on this issue:

http://haacked.com/archive/2009/06/25/json-hijacking.aspx/

One example of a page that returns a JSON object is /rest/tbot/json/Json_UserTags

references:

• http://hackademix.net/2009/01/13/you-dont-know-what-my-twitter-leaks/
• http://haacked.com/archive/2008/11/20/anatomy-of-a-subtle-json-vulnerability.aspx/
• http://haacked.com/archive/2009/06/26/too-late-to-change-json.aspx/

[romichg]

While this is important, i don't see this as a priority as a successful attack would be against an administrator, not the user, which limits the scope. I would suggest moving to 3.6, but will leave this here as a P4 for now.

[DinisCruz]

Moving to 4.0