app/components/avo/fields/trix_field/edit_component.html.erb in avo-3.0.0.pre12 vs app/components/avo/fields/trix_field/edit_component.html.erb in avo-3.0.0.pre13

@@ -18,10 +18,10 @@
         "trix-field-target": "editor",
         **@field.get_html(:data, view: view, element: :input)
       },
       input: trix_id,
       placeholder: @field.placeholder do %>
-      <%== @field.value %>
+      <%= sanitize @field.value %>
     <% end %>
     <%= @form.text_area @field.id,
       class: classes("w-full hidden"),
       data: @field.get_html(:data, view: view, element: :input),
       disabled: disabled?,