From a9dcf28d0934f304f5cf29252b641220adcf7cc4 Mon Sep 17 00:00:00 2001
From: Adam Moussa <166072409+amoussa1229@users.noreply.github.com>
Date: Thu, 30 Jul 2026 18:32:39 -0400
Subject: [PATCH] Update src/server/generate_form.py

Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
---
 src/server/generate_form.py | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/src/server/generate_form.py b/src/server/generate_form.py
index 6b2b8b3..b475992 100644
--- a/src/server/generate_form.py
+++ b/src/server/generate_form.py
@@ -38,8 +38,13 @@ def latest_menu() -> dict:
 
 
 def _json_for_script(value) -> str:
-    """Serialize for embedding in a <script> tag; escape </ to avoid early close."""
-    return json.dumps(value, separators=(",", ":")).replace("</", "<\\/")
+    """Serialize for embedding in a <script> tag; escape < and JS line separators."""
+    return (
+        json.dumps(value, separators=(",", ":"))
+        .replace("<", "\\u003c")
+        .replace("\u2028", "\\u2028")
+        .replace("\u2029", "\\u2029")
+    )
 
 
 def generate_form(