Do not allow JSON or query params to contain __proto__