release(v2.3.4): fix(admin): use textContent for footer preview to satisfy CodeQL

CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## Changes 12/5/2025 (v2.3.4)
+
+release(v2.3.4): fix(admin): use textContent for footer preview to satisfy CodeQL
+
 ## Changes 12/5/2025 (v2.3.3)
 
 release(v2.3.3): footer branding, Pro bundle UX + file list polish

public/js/adminPanel.js

@@ -117,8 +117,8 @@ function applyFooterFromAdmin() {
 
     const val = (document.getElementById('brandingFooterHtml')?.value || '').trim();
     if (val) {
-      // Allow HTML here – rely on backend sanitizing what gets stored.
-      footerEl.innerHTML = val;
+      // Show raw text in the live preview; HTML will be rendered on real page load
+      footerEl.textContent = val;
     } else {
       const year = new Date().getFullYear();
       footerEl.innerHTML =