Avoid JSONP 'Rosetta Flash' attack

See http://miki.it/blog/2014/7/8/abusing-jsonp-with-rosetta-flash/