From a54a6fe2de811fd2dcc9859fd71681ff2e9a2b94 Mon Sep 17 00:00:00 2001
From: Mark Eaton <MarkEEaton@users.noreply.github.com>
Date: Sat, 13 Jun 2026 23:45:57 -0400
Subject: [PATCH] Wrap CMS content box in v-pre to block Vue template injection

---
 groups/home/bootstrap5/home1.html | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/groups/home/bootstrap5/home1.html b/groups/home/bootstrap5/home1.html
index dcc0084..e487268 100644
--- a/groups/home/bootstrap5/home1.html
+++ b/groups/home/bootstrap5/home1.html
@@ -84,7 +84,10 @@
               data-light-src="https://libapps.s3.amazonaws.com/accounts/16298/images/xsmall-2.jpg"
               data-dark-src="https://d2jv02qf7xgjwx.cloudfront.net/accounts/16298/images/Kibbee_library_logo_inverted2.jpg"
             />
-            {{content_box_33471502}}
+            <!-- v-pre: LibGuides injects this content box server-side; this element sits
+                 inside the #app1 Vue root, so v-pre stops Vue from compiling the box's
+                 HTML as a template (prevents client-side template injection). -->
+            <div v-pre>{{content_box_33471502}}</div>
           </div>
           <!-- end of header div -->
         </div>