diff --git a/src/connectors/webauthn-fallback.ts b/src/connectors/webauthn-fallback.ts
index caffda43ca..7bd1935328 100644
--- a/src/connectors/webauthn-fallback.ts
+++ b/src/connectors/webauthn-fallback.ts
@@ -104,7 +104,7 @@ async function initWebAuthn(obj: any) {
function error(message: string) {
const el = document.getElementById('msg');
resetMsgBox(el);
- el.innerHTML = message;
+ el.textContent = message;
el.classList.add('alert');
el.classList.add('alert-danger');
}
@@ -114,7 +114,7 @@ function success(message: string) {
const el = document.getElementById('msg');
resetMsgBox(el);
- el.innerHTML = message;
+ el.textContent = message;
el.classList.add('alert');
el.classList.add('alert-success');
}
diff --git a/src/locales/en/messages.json b/src/locales/en/messages.json
index 149a47cba4..cd03a666a6 100644
--- a/src/locales/en/messages.json
+++ b/src/locales/en/messages.json
@@ -3844,7 +3844,7 @@
"message": "WebAuthn is not supported in this browser."
},
"webAuthnSuccess": {
- "message": "WebAuthn verified successfully!
You may close this tab."
+ "message": "WebAuthn verified successfully! You may close this tab."
},
"hintEqualsPassword": {
"message": "Your password hint cannot be the same as your password."