Fixes possible XSS with JSONP

Thanks to @JaSpr for the fix