First cut parsing strings with escapes; just validate, don't actually decode