diff --git a/src/popup.js b/src/popup.js
index 5d3c3ad..f56e87a 100644
--- a/src/popup.js
+++ b/src/popup.js
@@ -15,7 +15,7 @@ function loadDomain() {
   let tabs = browser.tabs.query({ active: true, currentWindow: true });
   tabs.then((tabs) => {
     const hostname = new URL(tabs[0].url).hostname;
-    document.querySelector("#domain").innerHTML = hostname;
+    document.querySelector("#domain").textContent = hostname;
 
     if (!hostname) {
       disableToggle();