[security-dev] securing JSON