> For the complete documentation index, see [llms.txt](https://h3ckt0r.gitbook.io/0xsec/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://h3ckt0r.gitbook.io/0xsec/appsec/ewaptx/jsonp.md).
# JSONP
Code Vulnerable
```html
Books Library
****
```
POC
```jsx
**
**
```
Mitigation
Use CORS Instead of JSONP
Strict Callback Validation
```php
"John Doe",
"email" => "john@example.com"
];
echo $callback . '(' . json_encode($data) . ');';
} else {
echo 'console.error("Invalid callback function.");';
}
```
JSONP Content-Type Validation
More Complex
#### Scenario 1: Exploiting with Malicious Parameters
```jsx
$name,
"email" => $email
];
// Vulnerable JSONP response with user input
echo $callback . '(' . json_encode($data) . ');';
```
exploit
```jsx
&email=attacker@example.com
```
get XSS and JSONP data
```
#### Scenario 4: JSONP Hijacking via CORS Misconfiguration
#### CORS-Enabled
```php
"58rec269qs4a9w8ewd2a6ghy6", // Sensitive data
];
echo $callback . '(' . json_encode($data) . ');';
```
Exploit
```javascript
```
Scenario 5: Advanced URL Manipulation
```php
"John Doe",
"email" => "john@example.com"
];
echo $callback . '(' . json_encode($data) . ');';
```