Use innerText instead of innerHTML to discourage XSS risks

Roberto Clapis (@empijei) pointed out to me that using innerHTML for
unformatted text is bad practice, so I've switched to using innerText
and SetTextContent instead.

fetch/main.go

@@ -16,7 +16,7 @@ type writer dom.Element
 // Write implements io.Writer.
 func (d writer) Write(p []byte) (n int, err error) {
 	node := dom.GetDocument().CreateElement("div")
-	node.SetInnerHTML(string(p))
+	node.SetTextContent(string(p))
 	(*dom.Element)(&d).AppendChild(node)
 	return len(p), nil
 }

js/main.go

@@ -14,7 +14,7 @@ func main() {
 	div := document.Call("getElementById", "target")
 
 	node := document.Call("createElement", "div")
-	node.Set("innerHTML", "Hello World")
+	node.Set("innerText", "Hello World")
 
 	div.Call("appendChild", node)
 }

jsgo/main.go

@@ -14,7 +14,7 @@ func main() {
 	div := document.Get("body")
 
 	node := document.Call("createElement", "div")
-	node.Set("innerHTML", "Hello jsgo.io!")
+	node.Set("innerText", "Hello jsgo.io!")
 
 	div.Call("appendChild", node)
 }