• JSON.stringify wrapper. Some characters or substrings of stringify result are unicode-encoded to make result safe for embedding into HTML (including CDATA strings). In short, it should encode these:

    • <script
    • </script
    • ]]>
    • \u2028
    • \u2029

    See

    Example

    stringify({ comment: "xss, here i come</script><script>alert(69)</script>" });

    will result in

    // {"comment":"xss, here i come\u003c/script>\u003cscript>alert(69)\u003c/script>"}

    Returns

    • A JSON string representing the given value or undefined if non-convertable value is passed.

    Parameters

    • source: unknown

      The value to convert to a JSON string.

    • Optional replacer: Replacer

      A function that alters the behavior of the stringification process, or an array of String and Number objects that serve as a whitelist for selecting/filtering the properties of the value object to be included in the JSON string. If this value is null or not provided, all properties of the object are included in the resulting JSON string.

    • Optional space: Space

      A String or Number object that's used to insert white space into the output JSON string for readability purposes. If this is a Number, it indicates the number of space characters to use as white space; this number is capped at 10 (if it is greater, the value is just 10). Values less than 1 indicate that no space should be used. If this is a String, the string (or the first 10 characters of the string, if it's longer than that) is used as white space. If this parameter is not provided (or is null), no white space is used.

    Returns string

Generated using TypeDoc