Report question

Question: Why is cross-domain JSONP safe, but cross-domainJSON not?