element. * * JSON_HEX_TAG turns < and > into \u003C and \u003E, so no value can close * the script element or open a comment; the other three keep &, ' and " * inert as well. Every value the plugin embeds in inline JavaScript goes * through js_encode() or add_inline_data(). */ const JS_JSON_FLAGS = JSON_HEX_TAG | JSON_HEX_AMP | JSON_HEX_APOS | JSON_HEX_QUOT; /** * Encode a value as a JavaScript literal that is safe inside