You're right - escaping is very dependent on context, and sometimes you need to escape data multiple times in nested contexts.

In inline script you need to get JS string escaping right and avoid </ sequence that ends HTML CDATA.

And if you send that data from JS to the server, you cannot rely on the theory that JS massaged that data first.