Possible security vulnerability

[carlosmintfan]

While I've not tested it, this line:

PHP-Vars-To-Js-Transformer/src/Transformers/ObjectTransformer.php

Line 33 in 6bbd3a4

return "'{$value}'";

looks to me like it'd break out the JavaScript string if the stringified $value contains the ' character.
Proposed fix: change the line to return json_encode((string) $value).
Thanks!