Not an issue but more a consideration

[gtbu]

You use innerHTML - https://developer.mozilla.org/en-US/docs/Web/API/Element/innerHTML

Favor textContent: When dealing with plain text content, it is generally safer to use the textContent property instead of innerHTML.
[1] ---- [2]

While neotoc's internal use of innerHTML for the title cannot be changed by the end-user, being aware of this distinction is important for overall web security.

[ashutoshbw]

Thank you for digging into the codebase and highlighting this subtle security concern. I’ll switch to textContent for the title option in the next release.