replace the unsafe eval by json.loads