fix jsonp rosetta flash vulnerability, see http://miki.it/blog/2014/7/8/abusing-jsonp-with-rosetta-flash/