From 2f20b85d0d824fb65fe864f8e9766529680ff685 Mon Sep 17 00:00:00 2001
From: Thorsten Rinne <thorsten@phpmyfaq.de>
Date: Fri, 26 Dec 2025 19:26:29 +0100
Subject: [PATCH] Potential fix for code scanning alert no. 23: DOM text
 reinterpreted as HTML

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
---
 phpmyfaq/admin/assets/src/content/attachment-upload.ts | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/phpmyfaq/admin/assets/src/content/attachment-upload.ts b/phpmyfaq/admin/assets/src/content/attachment-upload.ts
index e2a0649078..05075815dc 100644
--- a/phpmyfaq/admin/assets/src/content/attachment-upload.ts
+++ b/phpmyfaq/admin/assets/src/content/attachment-upload.ts
@@ -49,7 +49,7 @@ export const handleAttachmentUploads = (): void => {
         output = approx.toFixed(2) + ' ' + multiples[multiple] + ' (' + bytes + ' bytes)';
       }
 
-      fileSize.innerHTML = output;
+      fileSize.textContent = output;
       fileList.append(addElement('ul', { className: 'mt-2' }, fileItems));
     });
 
@@ -108,7 +108,7 @@ export const handleAttachmentUploads = (): void => {
           );
         });
 
-        fileSize.innerHTML = '';
+        fileSize.textContent = '';
         fileList.forEach((li: Element): void => {
           li.remove();
         });