Sniffer: only display quotes for string-type payload values
Injector: using unicode() and catching errors