From 915109c761d13166b9728e5a87ef66ed81a80a73 Mon Sep 17 00:00:00 2001
From: "G.Ambatte" <sean@robertson-family.nz>
Date: Mon, 28 Sep 2026 16:29:34 +1300
Subject: [PATCH 1/2] Change HTML replace to use function as replacement value

---
 server/app.js | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/server/app.js b/server/app.js
index cff01dcff..e67be863e 100644
--- a/server/app.js
+++ b/server/app.js
@@ -283,11 +283,13 @@ export default async function createApp(vite) {
 		const safeProps = JSON.stringify(props).replace(/<(?=\/?script)/ig, '\\u003c');
 		html = html.replace(
 			'<head>',
-			`<head>\n`
-			+ `<script id="props">`
-			+  `window.__INITIAL_PROPS__ = ` + safeProps
-			+ `</script>\n`
-			+ ogMetaTags
+			()=>{
+				return `<head>\n`
+				+ `<script id="props">`
+				+  `window.__INITIAL_PROPS__ = ${safeProps
+				}</script>\n${
+					ogMetaTags}`;
+			}
 		);
 
 		return html;

From b54021e35fd3b330a8d901a896d9b4c8b90d012d Mon Sep 17 00:00:00 2001
From: Trevor Buckner <calculuschild@gmail.com>
Date: Mon, 28 Sep 2026 11:28:16 -0400
Subject: [PATCH 2/2] Comment so we don't forget

---
 server/app.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server/app.js b/server/app.js
index e67be863e..64504c4e6 100644
--- a/server/app.js
+++ b/server/app.js
@@ -283,7 +283,7 @@ export default async function createApp(vite) {
 		const safeProps = JSON.stringify(props).replace(/<(?=\/?script)/ig, '\\u003c');
 		html = html.replace(
 			'<head>',
-			()=>{
+			()=>{ //Replace must use a function instead of string, else brews with `$` in contents are treated as replacement patterns
 				return `<head>\n`
 				+ `<script id="props">`
 				+  `window.__INITIAL_PROPS__ = ${safeProps