change the setting from setting innerHTML to innerText to be on the safe side.