Fix JSON-LD escaping on Clusters pages (unparsable structured data) (#740)

* Fix JSON-LD escaping on Clusters pages (unparsable structured data)

* sec harden

Author: richarddushime

layouts/partials/clusters/cluster_seo_jsonld.html

@@ -5,9 +5,12 @@
 
 {{ $summary := $p.Params.summary | default $p.Description | default "" }}
 {{ if eq $summary "" }}
-  {{ with $c.description }}{{ $summary = plainify . | truncate 300 "…" }}{{ end }}
+  {{ with $c.description }}{{ $summary = . }}{{ end }}
 {{ end }}
 {{ if eq $summary "" }}{{ $summary = printf "FORRT Cluster %d: %s." (int $c.number) $c.name }}{{ end }}
+{{ $summary = plainify $summary | truncate 300 "…" }}
+{{/* Defense-in-depth: prevent literal </script from terminating the tag */}}
+{{ $summary = replaceRE "(?i)</script" "<\\/script" $summary }}
 
 {{ $hubURL := "clusters/" | absURL }}
 
@@ -24,4 +27,4 @@
 
 {{ $graph := slice $webpage $breadcrumb }}
 {{ $root := dict "@context" "https://schema.org" "@graph" $graph }}
-<script type="application/ld+json">{{ $root | jsonify | safeHTML }}</script>
+<script type="application/ld+json">{{ $root | jsonify | safeJS }}</script>

layouts/partials/clusters/seo_jsonld.html

@@ -4,9 +4,12 @@
 
 {{ $summary := .Params.summary | default .Description | default "" }}
 {{ if eq $summary "" }}
-  {{ with .Summary }}{{ $summary = plainify . | truncate 300 "…" }}{{ end }}
+  {{ with .Summary }}{{ $summary = . }}{{ end }}
 {{ end }}
 {{ if eq $summary "" }}{{ $summary = "FORRT open science clusters taxonomy for educators and researchers." }}{{ end }}
+{{ $summary = plainify $summary | truncate 300 "…" }}
+{{/* Defense-in-depth: prevent literal </script from terminating the tag */}}
+{{ $summary = replaceRE "(?i)</script" "<\\/script" $summary }}
 
 {{ $elements := slice }}
 {{ range $i, $c := $data.clusters }}
@@ -27,4 +30,4 @@
 {{ $itemlist := dict "@type" "ItemList" "@id" (printf "%s#itemlist" .Permalink) "name" "FORRT Open Science Clusters" "description" "Full taxonomy of open and reproducible science clusters with sub-clusters and teaching references." "numberOfItems" (len $data.clusters) "itemListElement" $elements }}
 {{ $graph := slice $webpage $itemlist }}
 {{ $root := dict "@context" "https://schema.org" "@graph" $graph }}
-<script type="application/ld+json">{{ $root | jsonify | safeHTML }}</script>
+<script type="application/ld+json">{{ $root | jsonify | safeJS }}</script>