martini-contrib/render — pull request #23 by tamasd (2014-04-27 21:51:07+00:00)
Title: Adds protection against a JSON vulnerability.

An attacker can turn a JSON endpoint's answer into a JSONP callback, by
overriding the Array constructor. Adding a prefix to a JSON response,
which makes response syntactically invalid, fixes this issue.

More information on this issue: http://haacked.com/archive/2008/11/20/anatomy-of-a-subtle-json-vulnerability.aspx