fix: Remove innerHTML sink in Palindrome Checker (#627)

freeCodeCamp · Nov 20, 2024 · 47ac582 · 47ac582
1 parent ad1e829
commit 47ac582
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/apps/palindrome-checker/public/script.js b/apps/palindrome-checker/public/script.js
@@ -14,13 +14,13 @@ const checkForPalindrome = input => {
   resultDiv.replaceChildren();
 
   const lowerCaseStr = input.replace(/[^A-Za-z0-9]/gi, '').toLowerCase();
-  let resultMsg = `<strong>${originalInput}</strong> ${
+  let resultMsg = `${originalInput} ${
     lowerCaseStr === [...lowerCaseStr].reverse().join('') ? 'is' : 'is not'
   } a palindrome.`;
 
   const pTag = document.createElement('p');
   pTag.className = 'user-input';
-  pTag.innerHTML = resultMsg;
+  pTag.innerText = resultMsg;
   resultDiv.appendChild(pTag);
 
   // Show the result.