cbName is the untrusted config string that describes the JSONP packaging to be used. It's usually a client-provided query argument, potentially controlled by an attacker, and thus it is jsonpWrapper's ...