escape Location header with JSON.stringify

[atilafassina]

No description provided.

[netlify]

✅ Deploy Preview for solid-start-landing-page ready!

Name	Link
🔨 Latest commit	4f8000e
🔍 Latest deploy log	https://app.netlify.com/projects/solid-start-landing-page/deploys/69d640468849820008a280d4
😎 Deploy Preview	https://deploy-preview-2132--solid-start-landing-page.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[changeset-bot]

🦋 Changeset detected

Latest commit: 4f8000e

The changes in this PR will be included in the next version bump.

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/solidjs/solid-start/@solidjs/start@2132

npm i https://pkg.pr.new/solidjs/solid-start/@solidjs/vite-plugin-nitro-2@2132

commit: 4f8000e

[Copilot]

Pull request overview

This PR updates the streamed “complete redirect” handling to escape the Location header value when embedding it into an inline <script> redirect, aiming to reduce script injection risk during SSR streaming redirects.

Changes:

• Serialize the Location header value using JSON.stringify before writing it into the inline redirect script.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated no new comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.