. . . "Note that if this were supported, it would provide a huge security hole and a means of getting around cross-site scripting protections that protect json and other data." .