Why using a top-level array in JSON can be insecure: http://t.co/ff09qLsYaE (super subtle!)