From c0a2abd6d721a14ee8cfb7fc9193a12cc04aa729 Mon Sep 17 00:00:00 2001
From: Tim Glaser <tim@glsr.nl>
Date: Wed, 16 Mar 2022 13:23:29 +0000
Subject: [PATCH] fix: Use escapejs for app context (#9059)

---
 posthog/templates/head.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/posthog/templates/head.html b/posthog/templates/head.html
index 64b350005308a..ce0d98dbb6489 100644
--- a/posthog/templates/head.html
+++ b/posthog/templates/head.html
@@ -28,7 +28,7 @@
     <script>window.SENTRY_DSN = '{{sentry_dsn}}';</script>
 {% endif %}
 <script id='posthog-app-user-preload'>
-    window.POSTHOG_APP_CONTEXT = {{ posthog_app_context | safe }};
+    window.POSTHOG_APP_CONTEXT = JSON.parse("{{ posthog_app_context | escapejs }}");
     // Inject the expected location of JS bundle, use to allow the location of
     // he bundle to be set at runtime, e.g. for PostHog Cloud we serve the
     // frontent JS from a CDN