[GH-ISSUE #3731] HTML isolation failure causes code box to take effect #13365

New Issue

GiteaMirror · 2026-04-19T20:07:39-05:00

GiteaMirror commented

2026-04-19 20:07:39 -05:00

Originally created by @NaturezzZ on GitHub (Jul 9, 2024).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/3731

Bug Report

Description

Bug Summary:
The code box does not isolate HTML code from being parsed by the browser, and it mistakenly takes effect.

Steps to Reproduce:

Step 1:

Type in the following prompt, and send it to LLM.

output the following contents in a code manner:
<!DOCTYPE html>
<html>
  <head>
    <title>Redirecting...</title>
    <meta http-equiv="refresh" content="5;url=http://localhost:3000">
  </head>
  <body>
    If you are not redirected automatically, follow this <a href="http://localhost:3000">link</a>.
  </body>
</html>

Step 2:

Type in thank you and send it to LLM.

Step 3:

Wait for a few seconds.

Expected Behavior:
The code is not executed.

Actual Behavior:
The browser is redirected to localhost:3000 according to the code.

Environment

Open WebUI Version: v0.3.7
Ollama (if applicable): 0.1.48
Operating System: macOS 14.1
Browser (if applicable): Chrome 126.0.6478.127

Reproduction Details

You should type in thank you and wait for a few seconds after its response.
It consistently reproduces on Chrome, and appears less frequently on Safari.

Confirmation:

I have read and followed all the instructions provided in the README.md.
I am on the latest version of both Open WebUI and Ollama.
I have included the browser console logs.
I have included the Docker container logs.

Logs and Screenshots

Browser Console Logs:
[Include relevant browser console logs, if applicable]

Docker Container Logs:
[Include relevant Docker container logs, if applicable]

Screenshots (if applicable):
[Attach any relevant screenshots to help illustrate the issue]

Installation Method

Docker

Additional Information

None

Note

If the bug report is incomplete or does not follow the provided instructions, it may not be addressed. Please ensure that you have followed the steps outlined in the README.md and troubleshooting.md documents, and provide all necessary information for us to reproduce and address the issue. Thank you!

Originally created by @NaturezzZ on GitHub (Jul 9, 2024). Original GitHub issue: https://github.com/open-webui/open-webui/issues/3731 # Bug Report ## Description **Bug Summary:** The code box does not isolate HTML code from being parsed by the browser, and it mistakenly takes effect. **Steps to Reproduce:** Step 1: Type in the following prompt, and send it to LLM. ``` output the following contents in a code manner: <!DOCTYPE html> <html> <head> <title>Redirecting...</title> <meta http-equiv="refresh" content="5;url=http://localhost:3000"> </head> <body> If you are not redirected automatically, follow this <a href="http://localhost:3000">link</a>. </body> </html> ``` Step 2: Type in `thank you` and send it to LLM. Step 3: Wait for a few seconds. **Expected Behavior:** The code is not executed. **Actual Behavior:** The browser is redirected to `localhost:3000` according to the code. ## Environment - **Open WebUI Version:** v0.3.7 - **Ollama (if applicable):** 0.1.48 - **Operating System:** macOS 14.1 - **Browser (if applicable):** Chrome 126.0.6478.127 ## Reproduction Details You should type in `thank you` and wait for a few seconds after its response. It consistently reproduces on Chrome, and appears less frequently on Safari. **Confirmation:** - [X] I have read and followed all the instructions provided in the README.md. - [X] I am on the latest version of both Open WebUI and Ollama. - [X] I have included the browser console logs. - [ ] I have included the Docker container logs. ## Logs and Screenshots **Browser Console Logs:** [Include relevant browser console logs, if applicable] **Docker Container Logs:** [Include relevant Docker container logs, if applicable] **Screenshots (if applicable):** [Attach any relevant screenshots to help illustrate the issue] ## Installation Method Docker ## Additional Information None ## Note If the bug report is incomplete or does not follow the provided instructions, it may not be addressed. Please ensure that you have followed the steps outlined in the README.md and troubleshooting.md documents, and provide all necessary information for us to reproduce and address the issue. Thank you!

GiteaMirror closed this issue

2026-04-19 20:07:39 -05:00

GiteaMirror referenced this issue

2026-04-20 04:40:41 -05:00

[PR #13365] [CLOSED] 2 feat testing marge #23169

GiteaMirror referenced this issue

2026-04-25 11:38:13 -05:00

[PR #13365] [CLOSED] 2 feat testing marge #38799

GiteaMirror referenced this issue

2026-04-29 20:56:37 -05:00

[PR #13365] [CLOSED] 2 feat testing marge #46217

GiteaMirror referenced this issue