There was an issue where string attribute values were rendered without proper escaping, causing the browser to interpret them as HTML markup instead of displaying them as plain text. This issue has now been fixed.
We apologize for any inconvenience this issue may have caused!