Add support to prevent against Cross Site Script Inclusion (XSSI) attacks

[jeevatkm]

Goal is to prevent against Cross Site Script Inclusion (XSSI) attacks on JSON response payload aka JSON vulnerability.

XSSI attack is only successful if the returned JSON response is executable as JavaScript.

aah can add an option to prevent an attack by prefixing JSON response to make them non-executable.

Action Items:

• Add method JSONSecure on Reply() builder
• Make prefix configurable from aah.conf, default prefix value to )]}',\n
• Add documentation

[jeevatkm]

Done 😄