patch for JSON security issues