diff --git a/services/web-ui/public/player.html b/services/web-ui/public/player.html
index 6cba698..31f1eed 100644
--- a/services/web-ui/public/player.html
+++ b/services/web-ui/public/player.html
@@ -304,7 +304,7 @@
         </footer>
     </div>
 
-    <script src="/js/api.js?v=5"></script>
+    <script src="/js/api.js?v=6"></script>
 <script src="/js/topbar-strip.js?v=1"></script>
     <script>
         // ============================================================
@@ -407,10 +407,17 @@
             playerState.tags.forEach((tag, index) => {
                 const badge = document.createElement('div');
                 badge.className = 'tag-badge';
-                badge.innerHTML = `
-                    <span>${tag}</span>
-                    <span class="tag-remove" onclick="removeTag(${index})">×</span>
-                `;
+
+                const tagSpan = document.createElement('span');
+                tagSpan.textContent = tag;
+
+                const removeSpan = document.createElement('span');
+                removeSpan.className = 'tag-remove';
+                removeSpan.textContent = '×';
+                removeSpan.onclick = () => removeTag(index);
+
+                badge.appendChild(tagSpan);
+                badge.appendChild(removeSpan);
                 container.appendChild(badge);
             });
         }