From 032c8f51ba18b4dcbe792666d4683beeae8f7a11 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Albert=20M=C3=BCller?= <p8bpg9zrw7@privaterelay.appleid.com>
Date: Thu, 6 Aug 2026 03:43:24 +0300
Subject: [PATCH] Potential fix for code scanning alert no. 5: DOM text
 reinterpreted as HTML
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Albert Müller <p8bpg9zrw7@privaterelay.appleid.com>
---
 others/translate/app.js | 53 ++++++++++++++++++++++++++++++-----------
 1 file changed, 39 insertions(+), 14 deletions(-)

diff --git a/others/translate/app.js b/others/translate/app.js
index 17d2fb8..d0308f8 100644
--- a/others/translate/app.js
+++ b/others/translate/app.js
@@ -2315,20 +2315,45 @@ function handleFileUpload(file) {
     const fileIcon = getFileIcon(file.type);
     const fileSize = formatFileSize(file.size);
     
-    fileItem.innerHTML = `
-        <div class="file-info">
-            <div class="file-icon">${fileIcon}</div>
-            <div class="file-details">
-                <div class="file-name">${file.name}</div>
-                <div class="file-size">${fileSize}</div>
-            </div>
-        </div>
-        <div class="file-actions">
-            <button class="icon-button remove-file-button" title="Datei entfernen">
-                <span>×</span>
-            </button>
-        </div>
-    `;
+    const fileInfo = document.createElement('div');
+    fileInfo.className = 'file-info';
+
+    const fileIconElement = document.createElement('div');
+    fileIconElement.className = 'file-icon';
+    fileIconElement.textContent = fileIcon;
+
+    const fileDetails = document.createElement('div');
+    fileDetails.className = 'file-details';
+
+    const fileNameElement = document.createElement('div');
+    fileNameElement.className = 'file-name';
+    fileNameElement.textContent = file.name;
+
+    const fileSizeElement = document.createElement('div');
+    fileSizeElement.className = 'file-size';
+    fileSizeElement.textContent = fileSize;
+
+    fileDetails.appendChild(fileNameElement);
+    fileDetails.appendChild(fileSizeElement);
+
+    fileInfo.appendChild(fileIconElement);
+    fileInfo.appendChild(fileDetails);
+
+    const fileActions = document.createElement('div');
+    fileActions.className = 'file-actions';
+
+    const removeButtonElement = document.createElement('button');
+    removeButtonElement.className = 'icon-button remove-file-button';
+    removeButtonElement.title = 'Datei entfernen';
+
+    const removeButtonIcon = document.createElement('span');
+    removeButtonIcon.textContent = '×';
+
+    removeButtonElement.appendChild(removeButtonIcon);
+    fileActions.appendChild(removeButtonElement);
+
+    fileItem.appendChild(fileInfo);
+    fileItem.appendChild(fileActions);
     
     fileItems.appendChild(fileItem);
     if (fileList && fileList.style) {