Use poison for JSON
Smarter URL escaping