Fix unsafe innerHTML assignment

Maarrk · Mar 2, 2021 · 7d84e5b · 7d84e5b
1 parent 1727678
commit 7d84e5b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/localize.js b/localize.js
@@ -3,7 +3,7 @@ let messagesTemplate = ''
 document.querySelectorAll('[data-i18n-msg]').forEach((node) => {
   let message = browser.i18n.getMessage(node.dataset.i18nMsg)
   if (message.length > 0) {
-    node.innerHTML = message
+    node.textContent = message
   } else {
     messagesTemplate += `,