JSON.stringify() security issue

[donabrams]

JSON.stringify doesn't correctly escape </script> leading to potential client code injection. The use of a library like serialize-javascript is recommended.

Example:
https://github.com/erikras/react-redux-universal-hot-example/blob/master/src/server.js#L63

Vulnerability description:
http://benalpert.com/2012/08/03/preventing-xss-json.html

Since this is the defacto redux-hot example (minus the todo and counter), I really want to correct this here.

[erikras]

Thanks for that, @donabrams.