XSS fix by mobb-7bd3c974-b1d7-438f-a192-2c6a8aa3472a

xss-example.js

@@ -5,4 +5,4 @@ var username = urlParams.get('username');
 
 var unsafe_div = window.document.getElementById("vulnerable-div");
 // here's an XSS:
-unsafe_div.innerHTML = "Hello to you " + username;
+unsafe_div.textContent = "Hello to you " + username;