diff --git a/src/frontend/src/modals/formModal/chatMessage/index.tsx b/src/frontend/src/modals/formModal/chatMessage/index.tsx index 881395338..3e3cf2dd5 100644 --- a/src/frontend/src/modals/formModal/chatMessage/index.tsx +++ b/src/frontend/src/modals/formModal/chatMessage/index.tsx @@ -1,4 +1,5 @@ import Convert from "ansi-to-html"; +import DOMPurify from "dompurify"; import { ChevronDown } from "lucide-react"; import { useState } from "react"; import ReactMarkdown from "react-markdown"; @@ -12,7 +13,6 @@ import { ChatMessageType } from "../../../types/chat"; import { classNames } from "../../../utils"; import FileCard from "../fileComponent"; import { CodeBlock } from "./codeBlock"; - export default function ChatMessage({ chat, lockChat, @@ -61,7 +61,7 @@ export default function ChatMessage({ onClick={() => setHidden((prev) => !prev)} className=" form-modal-chat-thought " dangerouslySetInnerHTML={{ - __html: convert.toHtml(chat.thought), + __html: DOMPurify.sanitize(convert.toHtml(chat.thought)), }} > )}