Thank you for the succinct explanation. Regarding your third para, there are no <script> tags in the JSON data. I just checked and, yes, the htmlspecialchars() function is required to make things work as expected. John ========= On Fri, 2021-12-31 at 15:19 +0300, Andrey Repin wrote: > @yandex.ru>