Update app.py

app.py

@@ -111,8 +111,16 @@ def render_message(history):
         </div></div>
         <script src="https://cdnjs.cloudflare.com/ajax/libs/dompurify/2.3.3/purify.min.js"></script>
         <script>
-            var cleanHTML = DOMPurify.sanitize(userInputHTML);
-            document.getElementById("message-content").innerHTML = cleanHTML;
+            function escapeHtml(unsafe) {
+            return unsafe
+                .replace(/&/g, "&amp;")
+                .replace(/</g, "&lt;")
+                .replace(/>/g, "&gt;")
+                .replace(/"/g, "&quot;")
+                .replace(/'/g, "&#039;");
+            }
+            let message = document.getElementById('message-content').innerHTML
+            document.getElementById('message-content').innerHTML = escapeHtml(message);
         </script>
         """ 
     return messages_html