removed prototype injection from JSON.