linnovate/mean — pull request #670 by lirantal (2014-07-06 12:56:08+00:00)
Title: disabling JSONP from ExpressJS config and replacing all responses of jsonp() to json()

This is basically a re-do of PR https://github.com/linnovate/mean/pull/336 for the updated 0.4 version of MEAN. I believe the original request is correct and we shouldn't be enabling JSONP by default unless it is really required as it may open CSRF and other security related issues.