From b343cb80c2f37fd5c446f3ebaa9b21c74df35152 Mon Sep 17 00:00:00 2001
From: fire332 <96039230+fire332@users.noreply.github.com>
Date: Sat, 18 Apr 2026 06:28:12 -0700
Subject: [PATCH] fix: `TrustedHTML` trigger

YT now serves a TrustedHTML CSP header which restricts `Element#innerHTML` assignments. Refactor out any usage of that.
---
 src/ui.js | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/src/ui.js b/src/ui.js
index 8836a33a..c7c34b1a 100644
--- a/src/ui.js
+++ b/src/ui.js
@@ -144,9 +144,10 @@ function createOptionsPanel() {
 
   elmContainer.appendChild(elmBlock);
 
-  const elmSponsorLink = document.createElement('div');
-  elmSponsorLink.innerHTML =
-    '<small class="ytaf-ui-sponsor">Sponsor segments skipping - https://sponsor.ajay.app</small>';
+  const elmSponsorLink = document.createElement('small');
+  elmSponsorLink.className = 'ytaf-ui-sponsor';
+  elmSponsorLink.textContent =
+    'Sponsor segments skipping - https://sponsor.ajay.app';
   elmContainer.appendChild(elmSponsorLink);
 
   const version = document.createElement('div');