guardian/frontend — pull request #247 by gklopper (2012-11-14 14:58:07+00:00)
Title: Fixed script injection vulnerability with callback names.

Fix for...

F02 – Unauthenticated non-persistent cross-site scripting (XSS)

callback param is now checked to ensure it is only letters and/or numbers