diff --git a/src-node/www/phoenix-splash/error.html b/src-node/www/phoenix-splash/error.html
index ec67c17a6a..2b712ed0a3 100644
--- a/src-node/www/phoenix-splash/error.html
+++ b/src-node/www/phoenix-splash/error.html
@@ -8,10 +8,10 @@
                 const urlSearchParams = new URLSearchParams(window.location.search);
                 const params = Object.fromEntries(urlSearchParams.entries());
                 if(params.mainHeading){
-                    document.getElementById("mainHeading").innerHTML = decodeURIComponent(params.mainHeading);
+                    document.getElementById("mainHeading").textContent = decodeURIComponent(params.mainHeading);
                 }
                 if(params.mainSpan){
-                    document.getElementById("mainSpan").innerHTML = decodeURIComponent(params.mainSpan);
+                    document.getElementById("mainSpan").textContent = decodeURIComponent(params.mainSpan);
                 }
             }
         </script>
diff --git a/src/assets/phoenix-splash/live-preview-error.html b/src/assets/phoenix-splash/live-preview-error.html
index a8b73d5bb5..4b2c591f51 100644
--- a/src/assets/phoenix-splash/live-preview-error.html
+++ b/src/assets/phoenix-splash/live-preview-error.html
@@ -9,10 +9,10 @@
                 const urlSearchParams = new URLSearchParams(window.location.search);
                 const params = Object.fromEntries(urlSearchParams.entries());
                 if(params.mainHeading){
-                    document.getElementById("mainHeading").innerHTML = decodeURIComponent(params.mainHeading);
+                    document.getElementById("mainHeading").textContent = decodeURIComponent(params.mainHeading);
                 }
                 if(params.mainSpan){
-                    document.getElementById("mainSpan").innerHTML = decodeURIComponent(params.mainSpan);
+                    document.getElementById("mainSpan").textContent = decodeURIComponent(params.mainSpan);
                 }
             }
         </script>