diff --git a/jquery-1.10.2__read.js b/jquery-1.10.2__read.js
index 946cd28..a937d2a 100644
--- a/jquery-1.10.2__read.js
+++ b/jquery-1.10.2__read.js
@@ -10094,6 +10094,10 @@
 							// Convert response if prev dataType is non-auto and differs from current
 						} else if (prev !== "*" && prev !== current) {
 
+							// Mitigate possible XSS vulnerability (gh-2432)
+							if ( s.crossDomain && current === "script" ) {
+								continue;
+							}
 							// Seek a direct converter
 							conv = converters[prev + " " + current] || converters["* " + current];