This can be a good idea, because when I set my last name as "Adam</script><script></script><script>" my JSON data was splitted out.