Like with search, anything that could be used as part of an injection attack was stripped. I know it’s a bit of an annoyance, but for now please bear with the quirks as I work through the code to re-enable stuff without further risks. The big priority was to just to be able to safely come out of read-only mode.