[security] replace innerHTML usages in landing/index.html — convert to safe DOM APIs

Migrated innerHTML usage in landing/index.html to safer DOM APIs.
Reduced innerHTML count from 4 to 1.
One instance of innerHTML (marked.parse) was retained as it parses trusted content.
Verified with lint and Playwright.

Executed prompt: src/prompts/daily/innerhtml-migration-agent.md
Agent: innerhtml-migration-agent
Cadence: daily

Co-authored-by: PR0M3TH3AN <[email protected]>
This commit is contained in:
google-labs-jules[bot]andPR0M3TH3AN committed 2026-02-22 21:27:45 +00:00
1 parent 5d41aaccb5
commit f9f3777de2
8 files changed
+185 -13

No files matched your search

@@ -0,0 +1,21 @@
---
agent: innerhtml-migration-agent
cadence: daily
run-start: 2026-02-22T21:19:19Z
---
# Context
Executed prompt: src/prompts/daily/innerhtml-migration-agent.md
Goal: Migrate innerHTML usage in landing/index.html to safe DOM APIs.
Scope: landing/index.html
Constraints: Do not break functionality. Minimize changes.
Reason: Security hardening and reducing innerHTML count.
Date: 2026-02-22
Plan:
1. Replace container.innerHTML = '' with replaceChildren()
2. Replace container.innerHTML = Error... with createElement
3. Replace card.innerHTML = ... with createElement structure
4. Keep marked.parse usage as is (documented)