When I use JSON.stringify on a string that includes <script>
tags, the script tags somehow escape and show up in the body of my document, causing unexpected results with the "injected" data.
I'm puzzled by how they manage to escape, considering that quotation marks are escaped when using JSON.stringify. I even tried using JSON2.stringify but it didn't solve the issue.