jungm commented on PR #122:
URL: https://github.com/apache/johnzon/pull/122#issuecomment-1998029313

   to me it sounds more like you want to sanitize whatever json johnzon 
produced (from probably untrusted input). sanitizing input so you can somewhat 
safely directly inject it into the DOM is absolutely not an easy task, but I'm 
also having issues right now understanding how escaping HTML would help you
   
   For example, JS just does this and automatically unescapes again:
   ```
   $ node
   Welcome to Node.js v19.7.0.
   Type ".help" for more information.
   > JSON.parse("{\"value\": \"\u003C\u003E\"}")
   { value: '<>' }
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@johnzon.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to