Mitigate the "Rosetta Flash" JSONP attack vector, fixes T455