diff --git a/apps/ui/js/wizard.js b/apps/ui/js/wizard.js
index 118024f..423d48e 100644
--- a/apps/ui/js/wizard.js
+++ b/apps/ui/js/wizard.js
@@ -993,7 +993,14 @@ function renderFieldList(elId, typeName) {
   if (!fields || fields.length === 0) {
     var emptyEl = document.createElement('div');
     emptyEl.className = 'proto-field-empty';
-    emptyEl.innerHTML = tKey('wizard.grpc.fields_unresolved') + '<br><span style="color:var(--text-muted);font-size:11px;">' + tKey('wizard.grpc.fields_unresolved_body') + '</span>';
+    emptyEl.textContent = '';
+    emptyEl.appendChild(document.createTextNode(tKey('wizard.grpc.fields_unresolved')));
+    emptyEl.appendChild(document.createElement('br'));
+    var hint = document.createElement('span');
+    hint.style.color = 'var(--text-muted)';
+    hint.style.fontSize = '11px';
+    hint.textContent = tKey('wizard.grpc.fields_unresolved_body');
+    emptyEl.appendChild(hint);
     el.appendChild(emptyEl);
     return;
   }