toastdriven/django-tastypie — pull request #1233 by hmiguellima (2014-09-22 10:52:35+00:00)
Title: Security fix to prevent jsonp by default

The callback parameter in the request query string should not activate the jsonp format without checking the serializer.formats.