Merge pull request #2455 from PR0M3TH3AN/ai/innerhtml-fix/subscriptions-12650247027422970359

[security] replace innerHTML usages in js/subscriptions.js — convert to safe DOM APIs
This commit is contained in:
thePR0M3TH3AN authored and GitHub committed 2026-02-13 12:19:55 -05:00
commit 2eca209f02
8 files changed
+113 -16

No files matched your search

@@ -0,0 +1,16 @@
# Context
- **File:** `js/subscriptions.js`
- **Reason:** Migrating `innerHTML` assignments to safe DOM APIs as part of security hardening.
- **Date:** 2026-02-13
- **Commit:** (will be added)
- **Node:** v22.22.0
- **npm:** 11.7.0
## Plan
1. Replace `innerHTML` assignments with `textContent` where possible.
2. Implement `renderStatusMessage` helper for simple messages.
3. Implement `renderLoadingIndicator` helper to replace `getSidebarLoadingMarkup`.
4. Verify changes with lint and tests.
5. Update `check-innerhtml` baseline.