Phase 3: fixed template form editor

app/routes/templates.py

@@ -177,7 +177,7 @@ def form_editor(template_id):
     return render_template(
         'templates/form_editor.html',
         template=template,
-        form_schema_json=json.dumps(form_schema)
+        form_schema=form_schema          # pass the list — tojson handles encoding in the template
     )
 
 

app/templates/templates/form_editor.html

@@ -389,7 +389,7 @@
      This avoids using |safe which bypasses Jinja2 auto-escaping and could allow
      stored XSS if the sanitiser ever lets a malicious value through. #}
   <div id="schema-data"
-       data-schema="{{ form_schema_json | tojson }}"
+       data-schema="{{ form_schema | tojson }}"
        style="display:none;"></div>
 
   <!-- PROPERTIES -->