support strict mode for json injection