Use Handlebars's escapeExpression when stringifying JSON

bee-queue · Jan 16, 2018 · c8b8ac6 · c8b8ac6
1 parent 7a3d7fd
commit c8b8ac6
Showing 1 changed file with 7 additions and 6 deletions.
diff --git a/src/server/views/helpers/handlebars.js b/src/server/views/helpers/handlebars.js
@@ -1,15 +1,16 @@
 const _ = require('lodash');
-const Handlerbars = require('handlebars');
+const Handlebars = require('handlebars');
+
+const replacer = (key, value) =>
+    _.isString(value) ? Handlebars.Utils.escapeExpression(value) : value;
 
 const helpers = {
   json(obj, pretty = false) {
-    var d;
+    const args = [obj, replacer];
     if (pretty) {
-      d = JSON.stringify(obj, null, 2);
-    } else {
-      d = JSON.stringify(obj);
+      args.push(2);
     }
-    return new Handlerbars.SafeString(d);
+    return new Handlebars.SafeString(JSON.stringify(...args));
   },
 
   adjustedPage(currentPage, pageSize, newPageSize) {