That's the only one I know of.

The other code here will at least result in us getting an error at the UI side. -- Although the bits won't be escaped, so most unicorns will be invisible in the error message (but they'll be correctly line/column identified, so someone could eventually find them...).