From 33e64c1e06edc173e786fcac37ef25963587b6ca Mon Sep 17 00:00:00 2001
From: Eric <eric.scheid@ironclad.com.au>
Date: Thu, 24 Sep 2026 23:39:56 +1000
Subject: [PATCH] replace </?script in json

---
 server/app.js | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)
diff --git a/server/app.js b/server/app.js
index dfcd96ec6..cff01dcff 100644
--- a/server/app.js
+++ b/server/app.js
@@ -280,9 +280,14 @@ export default async function createApp(vite) {
 			html = await vite.transformIndexHtml(req.originalUrl, html);
 		}
 
+		const safeProps = JSON.stringify(props).replace(/<(?=\/?script)/ig, '\\u003c');
 		html = html.replace(
 			'<head>',
-			()=>{ return `<head>\n<script id="props" >window.__INITIAL_PROPS__ = ${JSON.stringify(props)}</script>\n${ogMetaTags}`; }
+			`<head>\n`
+			+ `<script id="props">`
+			+  `window.__INITIAL_PROPS__ = ` + safeProps
+			+ `</script>\n`
+			+ ogMetaTags
 		);
 
 		return html;
