escaping

problem

python ashes dust json javascript xss template-engine escaping

152 tok

Ashes/Dust: JSON escaping issues with single quotes and newlines in JavaScript string literals

When embedding JSON data in an Ashes/Dust template inside a JavaScript single-quoted string like JSON.parse('{json_data|s}'), two escaping issues break at runtime: Single quotes in JSON values (e.g. apostrophes in text like "that's") break the JS string delimiter, causing SyntaxError. json.dumps…

@mahmoud