@@ -290,7 +290,7 @@ async function kickChatMessage(data) {
290290 firstMessage . remove ( ) ;
291291
292292 user . style . color = data . sender . identity . color ;
293- user . innerHTML = `<strong> ${ data . sender . username } </strong>` ;
293+ user . textContent = data . sender . username ;
294294 message . innerHTML = messageHTML ;
295295
296296 if ( showAvatar ) avatar . innerHTML = `<img src="${ avatarImage } ">` ; else avatar . remove ( ) ;
@@ -340,9 +340,8 @@ async function kickFollowMessage(data) {
340340 const classes = [ 'kick' , 'follow' ] ;
341341
342342 header . remove ( ) ;
343-
344343
345- user . innerHTML = `<strong> ${ data . user . name } </strong>` ;
344+ user . textContent = data . user . name ;
346345 //user.innerHTML = `<strong>${data.userName}</strong>`;
347346
348347 action . innerHTML = ` followed you` ;
@@ -384,7 +383,7 @@ async function kickKicksGiftedMessage(data) {
384383 var kicksGiftId = data . gift . gift_id . replace ( '_' , '-' ) ;
385384 var kicksGiftImage = `<img class="gift-image" src="https://files.kick.com/kicks/gifts/${ kicksGiftId } .webp" alt="${ data . gift . name } ">` ;
386385
387- user . innerHTML = `<strong> ${ data . sender . username } </strong>` ;
386+ user . textContent = data . sender . username ;
388387 action . innerHTML = ` sent a <strong>${ data . gift . name } </strong> ` ;
389388
390389 var kicksGift = data . gift . amount > 1 ? 'Kicks' : 'Kick' ;
@@ -432,8 +431,7 @@ async function kickSubMessage(data) {
432431
433432 header . remove ( ) ;
434433
435-
436- user . innerHTML = `<strong>${ data . username } </strong>` ;
434+ user . textContent = data . username ;
437435
438436 action . innerHTML = ` subscribed for ` ;
439437
@@ -475,7 +473,7 @@ async function kickGiftMessage(data) {
475473 header . remove ( ) ;
476474
477475
478- user . innerHTML = `<strong> ${ data . gifter_username } </strong>` ;
476+ user . textContent = data . gifter_username ;
479477
480478 var giftedLength = data . gifted_usernames . length ;
481479
@@ -523,12 +521,11 @@ async function kickGiftSingleSub(gifter, recipient) {
523521 header . remove ( ) ;
524522 message . remove ( ) ;
525523
526-
527- user . innerHTML = `<strong>${ gifter } </strong>` ;
524+ user . textContent = gifter ;
528525
529526 action . innerHTML = ` gifted a subscription to ` ;
530527
531- value . innerHTML = `<strong>${ recipient } </strong>` ;
528+ value . innerHTML = `<strong>${ escapeHTML ( recipient ) } </strong>` ;
532529
533530 addEventItem ( 'kick' , clone , classes , userId , messageId ) ;
534531}
@@ -560,8 +557,7 @@ async function kickRewardRedemption(data) {
560557
561558 header . remove ( ) ;
562559
563-
564- user . innerHTML = `<strong>${ data . username } </strong>` ;
560+ user . textContent = data . username ;
565561 action . innerHTML = ` redeemed ` ;
566562 value . innerHTML = `<strong>${ data . reward_title } </strong>` ;
567563
@@ -600,8 +596,7 @@ async function kickRaidMessage(data) {
600596 header . remove ( ) ;
601597 message . remove ( ) ;
602598
603-
604- user . innerHTML = `<strong>${ data . host_username } </strong>` ;
599+ user . textContent = data . host_username ;
605600
606601 var viewers = data . number_viewers > 1 ? 'viewers' : 'viewer' ;
607602 action . innerHTML = ` hosted the channel with ` ;
0 commit comments