Fix quick prompt buttons: HTML-escape JSON to avoid breaking onclick attribute

app.py

@@ -156,7 +156,7 @@ def load_example_data(idx_str):
 def build_suggestion_chips_html():
     chips = []
     for s in SUGGESTIONS_CONFIG:
-        prompt_json = json.dumps(s["prompt"])
+        prompt_json = html_lib.escape(json.dumps(s["prompt"]))
         label = html_lib.escape(s["label"])
         chips.append(f'<button class="suggestion-chip" onclick="window.__setPrompt({prompt_json})">{label}</button>')
     return "".join(chips)