Null characters should be disallowed in JSON input and an error should be returned. Currently our JSON parser does not handle them correctly.

From the JSON spec

All Unicode characters may be placed within the
quotation marks, except for the characters that must be escaped:
quotation mark, reverse solidus, and the control characters (U+0000
through U+001F).