JSON XSSI protection test