Someone reported a bug on my site that I don't really consider an issue. My site has an URL akin to this:
So filetype is application/json, and I don't see how that can affect security of site.
His point of contention was that it can bypass crossdomain.xml if someone visits page with this in it:
I did a search for this but couldn't really find any information that says what he is saying is true. I need someone to tell me how serious this is, if I really need to go through my scripts to fix every instance of this bug.