fix bug 1056953 - Use DOM operations to inject content instead of innerHTML