JSON.stringify is not safe inside a script tag: JSON-LD XSS and its one-line fix | Hacker News Reader