JSON-LD stringification is non-standard

[Eyas]

Describe the bug

Same as google/react-schemaorg#9

JSON-LD stringification doesn't properly escape </script>, etc.

To Reproduce

1. Set JSON-LD to

{ name: "</script><script>alert('xss')</script>" }

(which is valid)

Expected behavior
Characters are escaped according to spec.

Additional context

The spec: https://www.w3.org/TR/json-ld11/#restrictions-for-contents-of-json-ld-script-elements

See the parent issue in w3c/json-ld-syntax#100 where this was created.

Example fix: google/react-schemaorg@22e7dec

[artiebits]

Hi @Eyas thank you very much for reporting the issue! I will fix it asap

[github-actions]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[artiebits]

i will close this issue for now because it doesn't even compile if I add script tag inside of that string

[!] (plugin svelte) ParseError: Unterminated string constant
dev/components/App.svelte
53:     "@type": "NewsArticle",
54:     headline: "ldJson Article Headline",
55:     name: "<script>alert('xss')</script>",
              ^