I thought JSON was a nice, simple, straightforward spec. Turns out
different implementations interpret some things just that little bit
differently enough to lead to headaches. That means security headaches
<http://www.theregister.co.uk/2016/11/01/json_parsers_tested/> ...
