fix up json injection tests