Parse tokens are not trivial in HHVM

Summary: CVE-2013-3735

Reviewed By: @LiraNuna

Differential Revision: D1384586