Update app.py

app.py

@@ -83,7 +83,7 @@ If no code or actions are requested, respond conversationally and help the user
 
 def escape_html_for_markdown(text):
     if not isinstance(text, str): return ""
-    return text.replace("&", "&").replace("<", "<").replace(">", ">")
+    return text.replace("&", "&amp;").replace("<", "&lt;").replace(">", "&gt;")
 
 def _infer_lang_from_filename(filename):
     if not filename: return "plaintext"
@@ -972,4 +972,4 @@ with gr.Blocks(theme=custom_theme, css=custom_css) as demo:
     refresh_status_button.click(fn=handle_refresh_space_status, inputs=[hf_api_key_input, owner_name_input, space_name_input], outputs=[space_runtime_status_display])
 
 if __name__ == "__main__":
-    demo.launch(debug=False, mcp_server=True)
+    demo.launch(debug=False, mcp_server=True)