Setting innerHTML is dangerous if it is a value that came from user input. Users will be able to inject cross site scripting attacks into the forms of other us

Setting innerHTML is dangerous if it is a value that came from user input. Users will be able to inject cross site scripting attacks into the forms of other users. Not saying to never sit, just saying to be aware of injection attacks on the front end.