fix: change innerHTML to trustedHTML

2025-10-14 23:36:28 +08:00
parent 2de10364f3
commit 9cdcf616f7
2 changed files with 24 additions and 2 deletions
--- a/src/common.js
+++ b/src/common.js
@@ -127,7 +127,7 @@ function showErr(message) {
  });

  const closeButton = document.createElement("span");
-  closeButton.innerHTML = "&times;";
+  closeButton.textContent = "×";

  Object.assign(closeButton.style, {
    position: "absolute",