[#6604] escape < to \u003C in JSON to ensure it cannot be parsed as HTML and be subject to XSS