captionText with innerHTML (fixes #88)

[mbabini]

Change captionText to use innerHTML instead of textContent.

Please check... (it's my first pull request ;-))

[midzer]

Thanks for your PR @mbabini 👍

Changes look good to me at first. But I hope there are no security issues with using innerHTML, because you could inject inline code via <script>.

Ofc the developer has to abuse it. Or can even users inject it somehow? What do you think @viliusle ?

[viliusle]

If developer will generate image gallery with captions from untrusted source, then yes, somebody will be able to inject malicious JS code.

we can add additional config variable, that is false, but developer can set it to true during init and allow HTML inside captions.

[viliusle]

Another idea is leave captionText as it was, but add captionHTML as new option

[midzer]

So captionHTML would have a higher priority than captionTextif set.

@mbabini wanna help out and update this PR with the new option?

[midzer]

bump

I'm gonna start working on this one over the holidays for next minor revision.

[midzer]

Should be solved by b43119e