XSS Protection

Prevents functions and other nonsense from being passed to the server. An attempt of ?callback=alert('t');asdf should be requested as ?callback=alerttasdf.

The regexp was rushed and hasn't been tested. There might be an error somewhere.