rack/rack-contrib — pull request #94 by valverde (2014-08-02 01:07:45+00:00)
Title: Prevent Rosetta Flash attack

Refer to http://miki.it/blog/2014/7/8/abusing-jsonp-with-rosetta-flash/ for a description of the vulnerability. This simple patch prevents the attack from working.