diff --git a/server/graph/resolvers/theming.js b/server/graph/resolvers/theming.js
index 3a175c0f..3e2d1cd6 100644
--- a/server/graph/resolvers/theming.js
+++ b/server/graph/resolvers/theming.js
@@ -47,8 +47,8 @@ module.exports = {
           darkMode: args.darkMode,
           tocPosition: args.tocPosition || 'left',
           injectCSS: args.injectCSS || '',
-          injectHead: args.injectHead || '',
-          injectBody: args.injectBody || ''
+          injectHead: args.injectHead ? args.injectHead.replace(/<script/gi, '') : '',
+          injectBody: args.injectBody ? args.injectBody.replace(/<script/gi, '') : ''
         }
 
         await WIKI.configSvc.saveToDb(['theming'])