diff --git a/app/public/libs/jquery-2.1.0.js b/app/public/libs/jquery-2.1.0.js
index f74c103f..1a3c780a 100644
--- a/app/public/libs/jquery-2.1.0.js
+++ b/app/public/libs/jquery-2.1.0.js
@@ -7666,6 +7666,11 @@
           // Convert response if prev dataType is non-auto and differs from current
         } else if (prev !== "*" && prev !== current) {
 
+          // Mitigate possible XSS vulnerability (gh-2432)
+          if ( s.crossDomain && current === "script" ) {
+            continue;
+          }
+
           // Seek a direct converter
           conv = converters[ prev + " " + current ] || converters[ "* " + current ];