Arbitrary Code Injection

json-sanitizer is vulnerable to arbtirary code injection. An attacker could potentially inject arbitrary HTML and XML into embedding documents as closing SCRIPT tags and CDATA section delimiters may be emitted for certain input.