Get Demo
The Kossy module before 0.60 for Perl allows JSON hijacking because of X-Requested-With mishandling.