[BUG] generate_review.py embeds JSON into <script> tag without escaping < — breaks eval review page when outputs contain HTML/JSX code examples
Resolved 💬 2 comments Opened May 11, 2026 by wildflower Closed Jun 9, 2026
Preflight Checklist
- [x] I have searched existing issues and this hasn't been reported yet
- [x] This is a single bug report (please file separate reports for different bugs)
- [x] I am using the latest version of Claude Code
What's Wrong?
What: generate_review.py uses bare json.dumps() to embed data into a <script> tag without escaping < — any eval output containing JSX or HTML code examples breaks the review page
What Should Happen?
Symptom: Next/Previous buttons do nothing, page appears frozen
Error Messages/Logs
Steps to Reproduce
Fix: .replace("<", "\\u003c").replace(">", "\\u003e").replace("&", "\\u0026") on the JSON before embedding, plus make the Google Fonts and SheetJS <head> scripts non-blocking
Claude Model
Sonnet (default)
Is this a regression?
Yes, this worked in a previous version
Last Working Version
_No response_
Claude Code Version
Version 1.6608.2 (ebf1a1)
Platform
Anthropic API
Operating System
Windows
Terminal/Shell
Other
Additional Information
_No response_
This issue has 2 comments on GitHub. Read the full discussion on GitHub ↗