fixes #1384 prevent xss attack in app title, also did a first pass of where we can use textContent in place of innerHTML
Merge pull request #1666 from ScottDowne/t1384

fixes #1384 prevent xss attack in app title, also did a first pass of wh...