From eb9c4c0e358c274aea35f21c2856c0a20051e5f1 Mon Sep 17 00:00:00 2001
From: Timothy Jaeryang Baek <tim@openwebui.com>
Date: Tue, 21 Oct 2025 17:59:52 -0400
Subject: [PATCH] refac/fix: insert prompt as rich text

---
 src/lib/components/common/RichTextInput.svelte | 16 ++++++++++------
 1 file changed, 10 insertions(+), 6 deletions(-)

diff --git a/src/lib/components/common/RichTextInput.svelte b/src/lib/components/common/RichTextInput.svelte
index 26ec540c67..a0a1996dfa 100644
--- a/src/lib/components/common/RichTextInput.svelte
+++ b/src/lib/components/common/RichTextInput.svelte
@@ -1,5 +1,7 @@
 <script lang="ts">
 	import { marked } from 'marked';
+	import DOMPurify from 'dompurify';
+
 	marked.use({
 		breaks: true,
 		gfm: true,
@@ -336,12 +338,14 @@
 		let tr = state.tr;
 
 		if (insertPromptAsRichText) {
-			const htmlContent = marked
-				.parse(text, {
-					breaks: true,
-					gfm: true
-				})
-				.trim();
+			const htmlContent = DOMPurify.sanitize(
+				marked
+					.parse(text, {
+						breaks: true,
+						gfm: true
+					})
+					.trim()
+			);
 
 			// Create a temporary div to parse HTML
 			const tempDiv = document.createElement('div');