prevent bad actors from creating a parse error

Solves the problem described in HenrikJoreteg/moonboots#31