3fb9aa9f84
_GET_SESSION_COUNT_SCRIPT was a mark_safe string used as a child of the view_game content tree. Under the "only Safe nodes render unescaped" rule, a mark_safe *string* child is escaped — so the <script> showed as literal text on the page. Make it a Safe node (and drop the now-unused mark_safe import). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>