Prefer `textContent` over `innerHTML`, it escapes special characters for you.