Actionpack now prefixes jsonp with comments (CVE-2014-4671)

https://github.com/rails/rails/commit/4003a5bd76ece6d5273e00bf9f468fbdcf
9ce1d6