Update app.py

app.py

@@ -127,7 +127,7 @@ def render_message(history):
     for user_message, assistant_message, user_profile, assistant_profile, user_pic, assistant_pic in history:
         if user_message and ("user", user_message) not in seen_messages:
             seen_messages.add(("user", user_message))
-            user_message_html = markdown.markdown(user_message, extensions=["fenced_code", "codehilite"])
+            user_message_html = markdown.markdown(escape_html(user_message), extensions=["fenced_code", "codehilite"])
             messages_html += f"""
             <div style='display: flex; flex-direction: column; align-items: flex-start; margin-bottom: 10px;'>
                 <img src='{user_pic}' style='width: 40px; height: 40px; border-radius: 50%; margin-bottom: 5px;'>
@@ -136,7 +136,7 @@ def render_message(history):
 
         if assistant_message and ("assistant", assistant_message) not in seen_messages:
             seen_messages.add(("assistant", assistant_message))
-            assistant_message_html = markdown.markdown(assistant_message, extensions=["fenced_code", "codehilite"])
+            assistant_message_html = markdown.markdown(escape_html(assistant_message), extensions=["fenced_code", "codehilite"])
             messages_html += f"""
             <div style='display: flex; flex-direction: column; align-items: flex-start; margin-bottom: 10px;'>
                 <img src='{assistant_pic}' style='width: 40px; height: 40px; border-radius: 50%; margin-bottom: 5px;'>