Merge branch '122-fix-xss-issues' into 'dev'

import copy

import html

import json

import logging

import math

    return loaded

def escape_key_names(obj):

    if isinstance(obj, dict):

        return {html.escape(str(key)): escape_key_names(value) for key, value in obj.items()}

    elif isinstance(obj, list):

        return [escape_key_names(element) for element in obj]

    else:

        return obj

def safe_dumps(obj, **kwargs):

    """

    This is a wrapper around dumps that encodes Infinity and NaN values.  It's a

    json.dumps to blow up if it encounters Infinity/NaN, or Decimal values

    and we 'fix' it before re-encoding.

    """

    if kwargs.get("escape_key_names", False):

        obj = escape_key_names(obj)

        kwargs.pop('escape_key_names')

    try:

        dumped = json.dumps(obj, allow_nan=False, **kwargs)

    except (ValueError, TypeError):

        return dumped.replace("</", "<\\/")

    return dumped

def safe_dumps_formatted(obj):

    """Attempt to format an object for display.

        console.debug("Initializing javascript application:", "${js_app_entry_fn}");

        // js-app.mako

        var options = ${ h.dumps( options ) };

        var bootstrapped = ${ h.dumps( bootstrapped ) };

        var options = ${ h.dumps( options, escape_key_names=True ) };

        var bootstrapped = ${ h.dumps( bootstrapped, escape_key_names=True ) };

        config.set({

            options: options,