Ensure JavaScript copied data is sanitized

Use document.createTextNode when copying value from input field to label,leveraging brosers built in sanitization functions