=== Security Risks & Mitigating Controls ===
====NEED TO INSPECT FURTHER====
* settings/js/sound.js:129 list.element.innerHTML = generateList(sounds, key);
** generateList appears to build HTML from unsanitized elements. Not sure if they are user controllable or not.
=== Actions & Recommendations ===