do not use innerHTML assignment when textNode will do
Merge pull request #418 from Trott/de-xss

do not use innerHTML assignment when textNode will do