This was handled via support. The root cause was a bug in our addon handling. Fix is https://git.cloudron.io/cloudron/box/-/commit/01945675edfd705d1a19d6ed9e40633b721be8f7
@matthijs that's not possible because HTML/Javascript is opaque "data" and one cannot replace things without understanding what the data is.
For example, the HTML could say "Your IP is NOT xxxxx" or "Your friend is at IP yyyy" or just about anything else. There is no way to reliably replace HTML (other than the app itself).