From 69df24ec134e66278ee2e65eecd5b431d917e20e Mon Sep 17 00:00:00 2001
From: JingWen Fan <106414602+study8677@users.noreply.github.com>
Date: Fri, 22 May 2026 12:43:02 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20stop=20blanking=20public=20pages=20?=
 =?UTF-8?q?=E2=80=94=20anchor=20static-copy=20regex=20to=20real=20<main>?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

_replace_static_site_copy matched `<main id="static-site-copy">.*?</main>`,
but that bare tag first appears as literal text *inside the head comment*
that documents the static-copy mechanism. With DOTALL the match ran from the
comment to the real </main>, swallowing the comment's closing `-->`, the
module <script src=/assets/index-*.js>, and <body> — leaving an unterminated
comment that the browser swallows to EOF. Result: every public route (/, /en/*,
/blog/*, /console) rendered a blank white page; /app/ was spared only because
it skips static-copy replacement.

Anchor the regex to the real element (which carries translate="yes"), so the
comment mention no longer matches. Use a callable replacement to avoid
backreference interpretation in the HTML payload.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 src/opencmo/web/app.py | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)
diff --git a/src/opencmo/web/app.py b/src/opencmo/web/app.py
index fafea19..491332d 100644
--- a/src/opencmo/web/app.py
+++ b/src/opencmo/web/app.py
@@ -886,9 +886,14 @@ def _replace_metadata(rendered: str, replacements: list[tuple[str, str]]) -> str
 
 
 def _replace_static_site_copy(rendered: str, static_copy: str) -> str:
+    # Match the real element, which carries translate="yes" — NOT the bare
+    # `<main id="static-site-copy">` mentioned inside the head comment. Matching
+    # the comment text would extend `.*?</main>` from inside the comment to the
+    # real </main>, swallowing the closing `-->`, the module <script>, and
+    # <body> — leaving an unterminated comment that blanks the whole page.
     return re.sub(
-        r'<main id="static-site-copy">.*?</main>',
-        static_copy,
+        r'<main id="static-site-copy" translate="yes"[^>]*>.*?</main>',
+        lambda _match: static_copy,
         rendered,
         count=1,
         flags=re.DOTALL,
