Talk about JSON and emphasize _whitelist-based_