title: Modern best practice for innerHTML replacement when you want to insert formatted text?
body: <p>From what I understand, setting <code>innerHTML</code> on an element is bad, because if the new contents come from users, a malicious user can use it to inject <code>&lt;script&gt;</code> tags and other harmful content.</p>
  <p>As demonstrated by <a href="https://stackoverflow.com/questions/24427621/innertext-vs-innerhtml-vs-label-vs-text-vs-textcontent-vs-outertext">this question</a>, there are now about eight different alternative tags (with some non-standard).</p>
  <p>In my case, I <em>want</em> to be able to insert actual html tags like <code>&lt;b&gt;</code> and <code>&lt;i&gt;</code>, and even <code>&lt;a&gt;</code>.</p>
  <p>But I never need <code>&lt;script&gt;</code> to be inserted.</p>
  <p>Is there a standardized best-practice alternative to <code>innerHTML</code> using vanilla Javascript?</p>