diff --git a/lib/middleware/utf8.js b/lib/middleware/utf8.js
index b7ee6291f7..51e12ce204 100644
--- a/lib/middleware/utf8.js
+++ b/lib/middleware/utf8.js
@@ -2,5 +2,5 @@
 // https://stackoverflow.com/questions/1497885/remove-control-characters-from-php-string/1497928#1497928
 module.exports = async (ctx, next) => {
     await next();
-    ctx.body = typeof ctx.body !== 'object' ? ctx.body.replace(/[\x00-\x1F\x7F]/g, '') : ctx.body;
+    ctx.body = typeof ctx.body !== 'object' ? ctx.body.replace(/[\x00-\x09\x0B\x0C\x0E-\x1F\x7F]/g, '') : ctx.body;
 };