See https://incompleteness.me/blog/2007/03/05/json-is-not-as-safe-as-people-think-it-is/