From ff93f33d405b7f4652706fda79c82cfbdefb6f5d Mon Sep 17 00:00:00 2001
From: "Rodrigo Rodriguez (Pragmatismo)" <me@rodrigorodriguez.com>
Date: Tue, 14 Apr 2026 14:20:10 -0300
Subject: [PATCH] fix: strip HTML tags to show plain text only

---
 ui/suite/js/htmx-app.js | 14 ++++++++++----
 1 file changed, 10 insertions(+), 4 deletions(-)

diff --git a/ui/suite/js/htmx-app.js b/ui/suite/js/htmx-app.js
index d29fc3b..335ba42 100644
--- a/ui/suite/js/htmx-app.js
+++ b/ui/suite/js/htmx-app.js
@@ -281,6 +281,13 @@
     htmx.process(chip);
   }
 
+  // Strip HTML tags and return plain text
+  function stripHtml(html) {
+    const temp = document.createElement('div');
+    temp.innerHTML = html;
+    return temp.textContent || temp.innerText || '';
+  }
+
   // Append message to chat
   function appendMessage(message) {
     const messagesEl = document.getElementById("messages");
@@ -289,14 +296,13 @@
     const messageEl = document.createElement("div");
     messageEl.className = `message ${message.sender === "user" ? "user" : "bot"}`;
     
-    // Check if content contains HTML tags
-    const isHtml = /<[a-z][\s\S]*>/i.test(message.text);
-    const textContent = isHtml ? message.text : escapeHtml(message.text);
+    // Strip HTML tags to show plain text only, never raw tags
+    const plainText = stripHtml(message.text);
     
     messageEl.innerHTML = `
             <div class="message-content">
                 <span class="sender">${message.sender}</span>
-                <span class="text">${textContent}</span>
+                <span class="text">${escapeHtml(plainText)}</span>
                 <span class="time">${formatTime(message.timestamp)}</span>
             </div>
         `;