From 76906eb126de728a25af0163e4d4ee71f88f6be4 Mon Sep 17 00:00:00 2001
From: Roman Hotsiy <gotsijroman@gmail.com>
Date: Tue, 17 Jul 2018 15:16:06 +0300
Subject: [PATCH] fix(cli): cli output crashes if script closing tag is in the
 spec

fixes #563
---
 cli/index.ts | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/cli/index.ts b/cli/index.ts
index 05ed7a28ec..100ca856d9 100644
--- a/cli/index.ts
+++ b/cli/index.ts
@@ -236,7 +236,7 @@ async function getPageHTML(
     redocHTML: `
     <div id="redoc">${(ssr && html) || ''}</div>
     <script>
-    ${(ssr && `const __redoc_state = ${escapeUnicode(JSON.stringify(state))};`) || ''}
+    ${(ssr && `const __redoc_state = ${sanitizeJSONString(JSON.stringify(state))};`) || ''}
 
     var container = document.getElementById('redoc');
     Redoc.${
@@ -306,6 +306,15 @@ function isURL(str: string): boolean {
   return /^(https?:)\/\//m.test(str);
 }
 
+function sanitizeJSONString(str: string) {
+  return escapeClosingScriptTag(escapeUnicode(str));
+}
+
+// see http://www.thespanner.co.uk/2011/07/25/the-json-specification-is-now-wrong/
+function escapeClosingScriptTag(str) {
+  return str.replace(/<\/script>/g, '<\\/script>');
+}
+
 // see http://www.thespanner.co.uk/2011/07/25/the-json-specification-is-now-wrong/
 function escapeUnicode(str) {
   return str.replace(/\u2028|\u2029/g, m => '\\u202' + (m === '\u2028' ? '8' : '9'));