diff --git a/frappe/public/js/frappe/form/control.js b/frappe/public/js/frappe/form/control.js
index abf4739fc5..c895d6c62a 100644
--- a/frappe/public/js/frappe/form/control.js
+++ b/frappe/public/js/frappe/form/control.js
@@ -1273,6 +1273,7 @@ frappe.ui.form.ControlTextEditor = frappe.ui.form.ControlCode.extend({
 		}
 	},
 	_set_input: function(value) {
+		value = frappe.utils.remove_script_and_style(value);
 		this.editor.set_input(value);
 		this.md_editor.val(value);
 		this.last_value = value;