Hello,

Thank you for the review and security feedback.

I have updated the extension to address the reported DOM injection concerns in popup.js (lines 622, 648, 714).

Changes made:

• Removed unsafe DOM insertion patterns.
• Replaced dynamic HTML-related operations with safer DOM handling methods.
• Added URL sanitization and validation to allow only http/https protocols.
• Added security comments in the source code for clarity and review purposes.

Best regards