diff --git a/src/components/embed-modal.jsx b/src/components/embed-modal.jsx
index fdd9c3ed7e..f8a9cbdf27 100644
--- a/src/components/embed-modal.jsx
+++ b/src/components/embed-modal.jsx
@@ -1,6 +1,7 @@
 import './embed-modal.css';
 
 import { Trans, useLingui } from '@lingui/react/macro';
+import DOMPurify from 'dompurify';
 
 import Icon from './icon';
 
@@ -23,7 +24,7 @@ function EmbedModal({ html, url, width, height, onClose = () => {} }) {
       </div>
       <div
         class="embed-content"
-        dangerouslySetInnerHTML={{ __html: html }}
+        dangerouslySetInnerHTML={{ __html: DOMPurify.sanitize(html) }}
         style={{
           '--width': width + 'px',
           '--height': height + 'px',
diff --git a/src/locales/en.po b/src/locales/en.po
index 402c2eae81..6d11f9fcd2 100644
--- a/src/locales/en.po
+++ b/src/locales/en.po
@@ -275,7 +275,7 @@ msgstr "View post stats"
 #: src/components/custom-emojis-modal.jsx:282
 #: src/components/drafts.jsx:57
 #: src/components/edit-profile-sheet.jsx:262
-#: src/components/embed-modal.jsx:13
+#: src/components/embed-modal.jsx:14
 #: src/components/generic-accounts.jsx:151
 #: src/components/gif-picker-modal.jsx:71
 #: src/components/import-accounts-selection.jsx:81
@@ -894,7 +894,7 @@ msgstr "Add field"
 msgid "Save"
 msgstr ""
 
-#: src/components/embed-modal.jsx:18
+#: src/components/embed-modal.jsx:19
 msgid "Open in new window"
 msgstr ""