Update app.py

app.py

@@ -135,7 +135,8 @@ document.getElementById('downloadPngBtn').addEventListener('click', downloadPng)
            
         </body></html>"""
     )
-
+    x = x.replace('"', "&quot;")
+    x = x.replace("'", "&quot;")
     return f"""<iframe style="width: 100%; height: 600px" name="result" allow="midi; geolocation; microphone; camera; 
     display-capture; encrypted-media;" sandbox="allow-modals allow-forms 
     allow-scripts allow-same-origin allow-popups