From 0fef2ab5095f2d554c68b65a8da7991744ad128e Mon Sep 17 00:00:00 2001
From: bartbutenaers <bart.butenaers@gmail.com>
Date: Mon, 22 Feb 2021 21:45:12 +0100
Subject: [PATCH] Avoid innerHtml

---
 .../editor-client/src/js/ui/common/editableList.js       | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/packages/node_modules/@node-red/editor-client/src/js/ui/common/editableList.js b/packages/node_modules/@node-red/editor-client/src/js/ui/common/editableList.js
index 7a8155260..d65a4f9fd 100644
--- a/packages/node_modules/@node-red/editor-client/src/js/ui/common/editableList.js
+++ b/packages/node_modules/@node-red/editor-client/src/js/ui/common/editableList.js
@@ -94,18 +94,19 @@
             }
 
             buttons.forEach(function(button) {
-                var innerHtml = "";
+                var text = "";
                 var titleAttribute="";
                 if (button.icon) {
-                    innerHtml = '<i class="'+button.icon+'"></i> ';
+                    text = '<i class="'+button.icon+'"></i> ';
                 }
                 if (button.label) {
-                    innerHtml += button.label;
+                    text += button.label;
                 }
                 if (button.title) {
                     titleAttribute = 'title="'+button.title+'"';
                 }
-                $('<a href="#" class="red-ui-button red-ui-button-small red-ui-editableList-addButton" style="margin-top: 4px; margin-right: 5px;" '+titleAttribute+'>'+innerHtml+'</a>')
+                $('<a href="#" class="red-ui-button red-ui-button-small red-ui-editableList-addButton" style="margin-top: 4px; margin-right: 5px;" '+titleAttribute+'></a>')
+                    .text(text)
                     .appendTo(that.topContainer)
                     .on("click", function(evt) {
                         evt.preventDefault();