It was only escaping the first quote, all other quotes and other characters that require to be escaped (like line breaks) were not being escaped. JSON.stringify is a good function to handle this.

This is useful for applications that want to know beforehand if usage of
an API key is supported.

Also removes limiter exemption

This is useful for applications that want to know beforehand if an API
key is necessary before accessing the running instance.