added comment and escaping to prevent XSS and Rosetta flash attacks
added missing concatenation operator
added missing options. in escapeStrings line
refactored JSONP logic added bad callback response in the case that an XSS vulnerable callback is passed
2.3.1