Prevent XSS attack through the JSONP callback. A CallbackValidator now validates the callback value. If it is not valid, a HttpException is thrown (status code = 400).
For more information, read: Do I need to sanitize the callback parameter from a JSONP call?