diff --git a/src/server/generate_form.py b/src/server/generate_form.py
index 6b2b8b3..b475992 100644
--- a/src/server/generate_form.py
+++ b/src/server/generate_form.py
@@ -38,8 +38,13 @@ def latest_menu() -> dict:
 
 
 def _json_for_script(value) -> str:
-    """Serialize for embedding in a <script> tag; escape </ to avoid early close."""
-    return json.dumps(value, separators=(",", ":")).replace("</", "<\\/")
+    """Serialize for embedding in a <script> tag; escape < and JS line separators."""
+    return (
+        json.dumps(value, separators=(",", ":"))
+        .replace("<", "\\u003c")
+        .replace("\u2028", "\\u2028")
+        .replace("\u2029", "\\u2029")
+    )
 
 
 def generate_form(