Untrusted JSON

See commit messages for more details