I'm less inclined to worry about that kind of user input via JSON, since the user couldn't cause that behavior by filling out a form.