After reading http://stackoverflow.com/questions/1217926/jsonp-callback-doesnt-execute-when-running-at-localhost and googling a lot, I am still unclear if there is a potential XSS security threat.
Is this "hole" covered in popular browsers nowadays?
(notice the dot in the URI)