Mail.ru: Утечка информации через JSONP (XXSI)

Information disclosure for logged-in user in out-of-scope service...