diff --git a/src/lib/components/common/RichTextInput.svelte b/src/lib/components/common/RichTextInput.svelte
index 26ec540c67..a0a1996dfa 100644
--- a/src/lib/components/common/RichTextInput.svelte
+++ b/src/lib/components/common/RichTextInput.svelte
@@ -1,5 +1,7 @@
 <script lang="ts">
 	import { marked } from 'marked';
+	import DOMPurify from 'dompurify';
+
 	marked.use({
 		breaks: true,
 		gfm: true,
@@ -336,12 +338,14 @@
 		let tr = state.tr;
 
 		if (insertPromptAsRichText) {
-			const htmlContent = marked
-				.parse(text, {
-					breaks: true,
-					gfm: true
-				})
-				.trim();
+			const htmlContent = DOMPurify.sanitize(
+				marked
+					.parse(text, {
+						breaks: true,
+						gfm: true
+					})
+					.trim()
+			);
 
 			// Create a temporary div to parse HTML
 			const tempDiv = document.createElement('div');