fix complex object json string bug

Author: tswayne

lib/react-helper.js

@@ -1,14 +1,15 @@
+require("babel-register");
 const reactDom = require('react-dom');
 const React = require('react');
-var ReactDOMServer = require('react-dom/server');
-require("babel-register");
+const ReactDOMServer = require('react-dom/server');
+const escapeHtml = require('escape-html');
 
 module.exports.register = function(component) {
-  var componentName = Object.keys(component)[0];
-  var dest = document.getElementById('react-helper-component-' + componentName.toLowerCase());
+  const componentName = Object.keys(component)[0];
+  const dest = document.getElementById('react-helper-component-' + componentName.toLowerCase());
   if (dest) {
-    var propString = dest.getAttribute('data-component-properties');
-    var props = {};
+    const propString = dest.getAttribute('data-component-properties');
+    let props = {};
     if (propString) {
       props = JSON.parse(propString);
     }
@@ -19,8 +20,8 @@ module.exports.register = function(component) {
 };
 
 module.exports.renderComponent = function(component, props) {
-  var propsString = JSON.stringify(props) || '';
-  var content = '';
+  const propsString = escapeHtml(JSON.stringify(props)) || '';
+  let content = '';
   if (typeof component === 'function') {
     content = ReactDOMServer.renderToString(React.createElement(component, props))
     component = component.name
@@ -31,5 +32,5 @@ module.exports.renderComponent = function(component, props) {
       component = component.name
     }
   }
-  return '<div id="react-helper-component-'+component.toLowerCase()+'" data-component-properties='+ propsString +'>'+ content + '</div>';
+  return '<div id="react-helper-component-'+component.toLowerCase()+'" data-component-properties="'+ propsString +'">'+ content + '</div>';
 };

package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-helper",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "description": "A helper that makes it extremely easy to add react to your node app.",
   "main": "index.js",
   "scripts": {
@@ -15,6 +15,7 @@
   "license": "ISC",
   "dependencies": {
     "babel-register": "^6.18.0",
+    "escape-html": "^1.0.3",
     "react": "^15.3.2",
     "react-dom": "^15.3.2"
   }