https://griddle-reviews.blogspot.com/2023/01/prevent-script-injection-with-innerhtml.html