= routing: Validate callback parameter of JSONP requests, fixes #308