From e7496883c4ce7397929ed056f5be74101823521e Mon Sep 17 00:00:00 2001
From: Dorian <dorian@Dorians-MacBook-Air.local>
Date: Wed, 4 Mar 2026 22:18:29 +0000
Subject: [PATCH] fix(app): replace innerHTML='' with textContent='' in
 usePlayer

Safer DOM clearing that avoids innerHTML for content sanitization.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 packages/app/src/composables/usePlayer.ts | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/packages/app/src/composables/usePlayer.ts b/packages/app/src/composables/usePlayer.ts
index 10b6b165..81a8a9fa 100644
--- a/packages/app/src/composables/usePlayer.ts
+++ b/packages/app/src/composables/usePlayer.ts
@@ -106,7 +106,7 @@ export function usePlayer() {
       audioEl.src = result.url
       audioEl.crossOrigin = 'anonymous'
       audioEl.preload = 'auto'
-      containerEl.innerHTML = ''
+      containerEl.textContent = ''
       containerEl.appendChild(audioEl)
       plyrInstance = new Plyr(audioEl, {
         controls: [],
@@ -144,7 +144,7 @@ export function usePlayer() {
       iframe.style.width = '100%'
       iframe.style.height = '100%'
       iframe.style.border = 'none'
-      containerEl.innerHTML = ''
+      containerEl.textContent = ''
       containerEl.appendChild(iframe)
       plyrInstance = null
       audioEl = null
@@ -160,7 +160,7 @@ export function usePlayer() {
     }
     audioEl = null
     if (containerEl) {
-      containerEl.innerHTML = ''
+      containerEl.textContent = ''
     }
   }