Ensure only specific XSS symbols are encoded.
Convert to using better supported JSON3.
Merge pull request #27 from tbranyen/address-matjas-feedback

Address feedback from Mathias.