Is It a Security Risk to Use innerHTML Even If You Set the Value Yourself?

If the content you are injecting into innerHTML is static and does not come from user input or any untrusted source, the security risk is significantly lower.

Apart from security issues, there are other drawbacks to using innerHTML as well.

If you are setting the values yourself, use safer alternatives like document.createElement and Element.appendChild which gives you more control over the DOM tree, enables reusability, and simplifies the addition of event listeners.

Using innerHTML is like taking a shortcut and a sign of not-so-good coding practice, so it's recommended to use safer alternatives unless there are compelling reasons not to.