title: "Anti-XSS protection" by adding )]}' before ajax response
body: <p>Google plus returns ajax requests with <code>)]}'</code> on first line. I heard it is protection against XSS. Are there any examples what and how could anyone do with this without that protection ?</p>