Removed support of callback functions in AJAX call

Fixed many XSS issues