From b96bb6edb753dd3bf09436e84e7aa78993dba56a Mon Sep 17 00:00:00 2001
From: Daniel Schadt <kingdread@gmx.de>
Date: Wed, 27 Jul 2022 14:29:49 +0200
Subject: embed JSON strings via tojson

This will properly escape special characters and quotes in the string.
---
 fietsboek/templates/layout.jinja2 | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/fietsboek/templates/layout.jinja2 b/fietsboek/templates/layout.jinja2
index 984a790..0e43a36 100644
--- a/fietsboek/templates/layout.jinja2
+++ b/fietsboek/templates/layout.jinja2
@@ -19,15 +19,15 @@
     <link href="{{request.static_url('fietsboek:static/theme.css')}}" rel="stylesheet">
 
     <script>
-const FRIENDS_URL = "{{ request.route_url('json-friends') }}";
-const LOCALE = "{{ request.localizer.locale_name.replace('_', '-') }}";
+const FRIENDS_URL = {{ request.route_url('json-friends') | tojson }};
+const LOCALE = {{ request.localizer.locale_name.replace('_', '-') | tojson }};
 {% if request.registry.settings.get("thunderforest.api_key") %}
 {% set api_key = request.registry.settings.get("thunderforest.api_key") %}
 window.JB = window.JB || {};
 window.JB.GPX2GM = window.JB.GPX2GM || {};
-window.JB.GPX2GM.OSM_Cycle_Api_Key = "{{ api_key }}";
-window.JB.GPX2GM.OSM_Landscape_Api_Key = "{{ api_key }}";
-window.JB.GPX2GM.OSM_Outdoors_Api_Key = "{{ api_key }}";
+window.JB.GPX2GM.OSM_Cycle_Api_Key = {{ api_key | tojson }};
+window.JB.GPX2GM.OSM_Landscape_Api_Key = {{ api_key | tojson}};
+window.JB.GPX2GM.OSM_Outdoors_Api_Key = {{ api_key | tojson }};
 {% endif %}
     </script>
 
-- 
cgit v1.2.3