diff --git a/src/core/operations/ParseAITokens.mjs b/src/core/operations/ParseAITokens.mjs
index 06d4c5f6..70c457d5 100644
--- a/src/core/operations/ParseAITokens.mjs
+++ b/src/core/operations/ParseAITokens.mjs
@@ -148,6 +148,7 @@ class ParseAITokens extends Operation {
                     return "";
                 }
             })
+            .replace(/<script/ig, "&lt;script") // satisfy codeql
             .replace(/[\r\n]/g, "");
     }