Switch from innerHTML to textContent for safety reasons

lizgw · Aug 16, 2017 · dee0539 · dee0539
1 parent d6d1b0e
commit dee0539
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/src/main.js b/src/main.js
@@ -74,15 +74,15 @@ var colorPairs = [
 function updateTime() {
 	chrome.storage.sync.get("use24HourTime", function(items) {
 		if (!items.use24HourTime) {
-			timeElem.innerHTML = moment().format("h:mm A");
+			timeElem.textContent = moment().format("h:mm A");
 		} else {
-			timeElem.innerHTML = moment().format("HH:mm");
+			timeElem.textContent = moment().format("HH:mm");
 		}
 	});
 }
 
 function updateDate() {
-	dateElem.innerHTML = moment().format("dddd, MMMM Do, YYYY");
+	dateElem.textContent = moment().format("dddd, MMMM Do, YYYY");
 }
 
 function pickColors() {