From 57b96a9509846af55ff058c56d5aaca16c8a51f2 Mon Sep 17 00:00:00 2001
From: RinCodeForge927 <dangnhatrin90@gmail.com>
Date: Thu, 8 Jan 2026 13:01:47 +0700
Subject: [PATCH] security: replace insecure innerHTML with textContent and
 replaceChildren

---
 api-samples/printing/printers.js                      | 2 +-
 api-samples/tabs/inspector/window_and_tabs_manager.js | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/api-samples/printing/printers.js b/api-samples/printing/printers.js
index eba8b9639c..511e20f6cf 100644
--- a/api-samples/printing/printers.js
+++ b/api-samples/printing/printers.js
@@ -87,7 +87,7 @@ function onCancelButtonClicked(jobId) {
 
 function createButton(label, onClicked) {
   const button = document.createElement('button');
-  button.innerHTML = label;
+  button.textContent = label;
   button.onclick = onClicked;
   return button;
 }
diff --git a/api-samples/tabs/inspector/window_and_tabs_manager.js b/api-samples/tabs/inspector/window_and_tabs_manager.js
index d67312a579..f932e05e13 100644
--- a/api-samples/tabs/inspector/window_and_tabs_manager.js
+++ b/api-samples/tabs/inspector/window_and_tabs_manager.js
@@ -31,7 +31,7 @@ async function loadWindowList() {
   }
 
   const output = document.getElementById('windowList');
-  output.innerHTML = '';
+  output.replaceChildren();
 
   for (let window of windowList) {
     const windowItem = document.importNode(windowTemplate, true).children[0];