jsonp: added security checks