opf/openproject — pull request #563 by hschink (2013-10-29 11:34:14+00:00)
Title: [FIX] JSON hijacking

Implements [ticket 1749](https://www.openproject.org/issues/1749)

Tested with [Firefox Portable 3.0.19](http://downloads.sourceforge.net/portableapps/FirefoxPortable_3.0.19_German.paf.exe?download) and the following HTML site (taken from [spiderlabs.com](http://blog.spiderlabs.com/2012/09/json-hijacking-demystified.html)) - don't forget to replace ``[IP:PORT]`` by the ip address and port number of your test system:

```html

JSON Hijacking

test

```