diff --git a/internal/web/handler.go b/internal/web/handler.go
index 4b65fe8..ef2b6a6 100644
--- a/internal/web/handler.go
+++ b/internal/web/handler.go
@@ -601,7 +601,7 @@ const ipDetailsHTML = `<!doctype html>
     .hint { font-size: .9rem; color: #94a3b8; margin-top: .75rem; }
   </style>
 </head>
-<body>
+<body data-ip="{{ .IP }}">
   <header>
     <div><a href="/">← Back</a></div>
     <h1 class="mono">{{ .IP }}</h1>
@@ -646,7 +646,7 @@ const ipDetailsHTML = `<!doctype html>
     </section>
   </main>
   <script>
-    const ip = {{ printf "%q" .IP }};
+    const ip = document.body.dataset.ip || '';
 
     function escapeHtml(value) {
       return String(value ?? '').replace(/[&<>"']/g, character => ({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'}[character]));
diff --git a/internal/web/handler_test.go b/internal/web/handler_test.go
index d29639c..b2fbc9d 100644
--- a/internal/web/handler_test.go
+++ b/internal/web/handler_test.go
@@ -77,6 +77,20 @@ func TestHandlerServesOverviewAndManualActions(t *testing.T) {
 	if strings.Contains(recorder.Body.String(), "Recent events") {
 		t.Fatalf("overview page should no longer render recent events block")
 	}
+
+	recorder = httptest.NewRecorder()
+	request = httptest.NewRequest(http.MethodGet, "/ips/203.0.113.10", nil)
+	handler.ServeHTTP(recorder, request)
+	if recorder.Code != http.StatusOK {
+		t.Fatalf("unexpected ip details page status: %d", recorder.Code)
+	}
+	body := recorder.Body.String()
+	if !strings.Contains(body, `data-ip="203.0.113.10"`) {
+		t.Fatalf("ip details page did not expose expected data-ip attribute: %s", body)
+	}
+	if strings.Contains(body, `const ip = "\"203.0.113.10\"";`) {
+		t.Fatalf("ip details page still renders a doubly quoted IP")
+	}
 }
 
 type stubApp struct {
