Sanitize innerHTML in javascript

Question

I am using that block of code and bring told by a code validator that this should be sanitized.

What is wrong with it and how can i sanitize it?

el1 = document.getElementById('quote'); //this is fine
el1.innerHTML = quoteNew; //this should be sanitized

Answer 1

如果quoteNew的内容只是要显示的文本，则使用textContent属性。

 el1.textContent = quoteNew;