Cross Site Scripting Weakness Reflected In Json Response