From 5613bc57c526f3940d01271600586f95e7b68df5 Mon Sep 17 00:00:00 2001
From: saurabhhhcodes <saurabh.bajpai@example.com>
Date: Sat, 1 Aug 2026 05:14:23 +0530
Subject: [PATCH] fix: code quality and safety improvements

---
 src/apiUsageDashboard.ts | 6 +++---
 src/utils/domHelpers.ts  | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/src/apiUsageDashboard.ts b/src/apiUsageDashboard.ts
index 8a871676..074bc7d7 100644
--- a/src/apiUsageDashboard.ts
+++ b/src/apiUsageDashboard.ts
@@ -15,15 +15,15 @@ function escapeHtml(value: string): string {
 }
 
 export async function renderApiUsageDashboard(container: HTMLElement): Promise<void> {
-  container.innerHTML = '<p class="usage-loading">Loading API usage stats…</p>';
+  container.textContent = '<p class="usage-loading">Loading API usage stats…</p>';
 
   try {
     const stats = await getUsageStats();
-    container.innerHTML = buildDashboardHTML(stats);
+    container.textContent = buildDashboardHTML(stats);
     attachEventListeners(container);
   } catch (err) {
     console.error("[LateMeet] Failed to load API usage dashboard:", err);
-    container.innerHTML = '<p class="usage-error">Failed to load API usage data.</p>';
+    container.textContent = '<p class="usage-error">Failed to load API usage data.</p>';
   }
 }
 
diff --git a/src/utils/domHelpers.ts b/src/utils/domHelpers.ts
index abfcd72b..351cbb3e 100644
--- a/src/utils/domHelpers.ts
+++ b/src/utils/domHelpers.ts
@@ -26,7 +26,7 @@ const HTML_ESCAPE_MAP: Record<string, string> = {
  *   their corresponding named HTML entities.
  *
  * @example
- * element.innerHTML = `<span>${escapeHtml(user.displayName)}</span>`;
+ * element.textContent = `<span>${escapeHtml(user.displayName)}</span>`;
  * // Input:  'Alice <script>alert(1)</script>'
  * // Output: 'Alice &lt;script&gt;alert(1)&lt;/script&gt;'
  */