JSON.stringify is not safe inside a script tag: JSON-LD XSS and its one-line fix (tobiasuhlig.medium.com)