JSONP response fixed against possible XXS