XSS fix

public_html/js/phone.js

@@ -12,11 +12,11 @@ class Phone{
 
 		let h2 = document.createElement("h2");
 		h2.className = "messageTitle";
-		h2.innerHTML = message.title;
+		h2.innerText = message.title;
 
 		let p = document.createElement("p");
 		p.className = "messageContent";
-		p.innerHTML = message.content;
+		p.innerText = message.content;
 
 		msg.appendChild(h2);
 		msg.appendChild(p);