SECURITY: Ensure that strings in JavaScript and JSON that
contain </ are emitted as <\/.  This avoids XSS (Cross Site Scripting)
attacks using </script>.  Note that XSS does not affect the security
of the server itself, but may be used by attackers to serve malicious
JavaScript from trusted sites.
SECURITY: Ensure that declared CDATA elements (script, style) cannot
contain their end-tag.  The script content must ensure this based on
features of the scripting language.  The library(http/html_write)
verifies that this is done and throws a domain_error(cdata, String)
if this is not the case.  This should probably be a representation_error,
but representation errors cannot provide the context :-(

MODIFIED: This patch also processes the content of script and style
tags as if written as \[Content].  The processing of raw data is extended
to include all relevant parts of regular HTML content that are meaningful
for CDATA elements.