(text)
| 157 | |
| 158 | // Escape HTML to prevent XSS |
| 159 | function escapeHtml(text) { |
| 160 | const div = document.createElement('div') |
| 161 | div.textContent = text |
| 162 | return div.innerHTML |
| 163 | } |
| 164 | |
| 165 | // Initialize - render any existing messages |
| 166 | renderMessages(client.getMessages()) |