Deep nesting and duplicate keys, yes. Long strings we block on the frame size for web sockets.
That covers the nasty ones. Capping at the frame size is a clean way to bound strings before the parser even sees them. Thanks for answering.
🚀1