diff --git a/app/utils/ms_edge_tts.ts b/app/utils/ms_edge_tts.ts
index f291ebada..4da00143e 100644
--- a/app/utils/ms_edge_tts.ts
+++ b/app/utils/ms_edge_tts.ts
@@ -233,15 +233,23 @@ export class MsEdgeTTS {
   }
 
   private _SSMLTemplate(input: string, options: ProsodyOptions = {}): string {
-    // in case future updates to the edge API block these elements, we'll be concatenating strings.
+    // 对 input 进行特殊字符替换
+    input = input
+      .replace(/&/g, "&")
+      .replace(/</g, "&lt;")
+      .replace(/>/g, "&gt;");
+
+    // 合并默认选项与传入选项
     options = { ...new ProsodyOptions(), ...options };
-    return `<speak version="1.0" xmlns="http://www.w3.org/2001/10/synthesis" xmlns:mstts="https://www.w3.org/2001/mstts" xml:lang="${this._voiceLocale}">
-                <voice name="${this._voice}">
-                    <prosody pitch="${options.pitch}" rate="${options.rate}" volume="${options.volume}">
-                        ${input}
-                    </prosody> 
-                </voice>
-            </speak>`;
+
+    return `
+        <speak version="1.0" xmlns="http://www.w3.org/2001/10/synthesis" xmlns:mstts="https://www.w3.org/2001/mstts" xml:lang="${this._voiceLocale}">
+            <voice name="${this._voice}">
+                <prosody pitch="${options.pitch}" rate="${options.rate}" volume="${options.volume}">
+                    ${input}
+                </prosody>
+            </voice>
+        </speak>`;
   }
 
   /**