jsContext does not escape </script> tags properly

[carsonreinke]

When doing window.stencilBootstrap("{{page_type}}", {{jsContext}}).load(); under https://github.com/bigcommerce/cornerstone/blob/master/templates/layout/base.html#L53, the context often contains a "description" or HTML blob.

Browser interpretation of '</script>' actually has the first ' as the last line in a JS block and ' would actually appear on the page.

This should be properly encoded by escaping /.

[davidmadi]

Thank you so much for identifying it! I'm setting special protection on my product's custom fields to avoid that until fixed.