relying on JSON.stringify to escape css