diff --git a/lib/channel.js b/lib/channel.js
index 86c7cfe8..9a6ae3d1 100644
--- a/lib/channel.js
+++ b/lib/channel.js
@@ -3040,7 +3040,8 @@ Channel.prototype.filterMessage = function (msg) {
     }
 
     // Recombine the message
-    return parts.join("");
+    msg = parts.join("");
+    return XSS.sanitizeHTML(msg);
 };
 
 /**