The problem is, of course, that you never know whether some library (e.g. a JSON parser) used substring() to extract a string or not...