If you believe you've found a security issue in Django REST framework I suggest raising emailing the security contact as listed here: http://django-rest-framewo

If you believe you've found a security issue in Django REST framework I suggest raising emailing the security contact as listed here: http://django-rest-framework.org/#security http://django-rest-framework.org/#security Having said that, it's worth pointing out that Django REST framework does not return JSONP by default, and although it does for historical reasons include a JSONP renderer, the documentation recommends the use of CORS instead.