diff --git a/app/views/published_post/show.html.erb b/app/views/published_post/show.html.erb
index c8b0a9b..93aba88 100644
--- a/app/views/published_post/show.html.erb
+++ b/app/views/published_post/show.html.erb
@@ -1,6 +1,6 @@
 <%- if @post.content.present? %>
   <div class="post-wrapper">
-    <%= @post.content.html_safe %>
+    <%= sanitize @post.content.html_safe %>
   </div>
   <div class="post-actions" data-read-url="<%= api_v1_post_view_path(@post) %>"></div>
 <%- else %>