strVar, need to scrub parent variable and definitionHub entries before assigning it to innerHTML of the parent DOM element.

[CanntAim]

This is a potentially serious XSS vulnerability...

[CanntAim]

There are actually multiple user input locations that need to be trimmed or scrubbed for tags...