It's less silly than it sounds. Many XML attacks have JSON equivalents. Do you know how your JSON parser will deal with 512KB of open square brackets in a row?
You've (both) opened my eyes to a new and terrifying world. I don't know if I should thank you or just weep silently.
all common XML message formats including POX (Plain Old XML), SOAP, REST and AJAX
That made my day.
My brow is now permanently furrowed and my heart has arrested.