It looks like you could trivially exploit this with XSS? The example code has glaring vulnerabilities in terms of taking user input and then inserting it into t

It looks like you could trivially exploit this with XSS? The example code has glaring vulnerabilities in terms of taking user input and then inserting it into the DOM verbatim. Anyone who copy/pastes that example is going to have a rough time.