Remove some instances of innerHTML usage and remove possibility of injecting an insecure image into secure pages.