Bug 1086427 - Do not use JSON.load() with untrusted JSON

* see https://www.ruby-lang.org/en/news/2013/02/22/json-dos-cve-2013-0269/