Fix some security issues

.github/workflows/dotnet-test.yml

@@ -1,4 +1,6 @@
 name: .NET Tests
+permissions:
+  contents: read
 on:
   push:
     branches: [ "main" ]

.github/workflows/translations-test.yml

@@ -1,4 +1,7 @@
 name: Translation integrity
+permissions:
+  contents: read
+  pull-requests: write
 on:
   pull_request:
     branches: [ "main" ]

.github/workflows/update-icons.yaml

@@ -5,6 +5,10 @@ on:
     - cron: 0 0 * * *
   workflow_dispatch:
 
+permissions:
+  contents: write
+  pull-requests: write
+
 jobs:
   load-icons:
     if: github.repository == 'marticliment/UniGetUI'

.github/workflows/update-tolgee.yml

@@ -1,5 +1,9 @@
 name: Tolgee CI
 
+permissions:
+  contents: read
+  pull-requests: write
+
 on:
   schedule:
     - cron: 0 0 * * *

.github/workflows/winget-prerelease.yml

@@ -1,5 +1,8 @@
 name: Publish prereleases to WinGet
 
+permissions:
+  contents: read
+
 on:
   release:
     types: [published]  # Trigger on published release (includes prereleases)

.github/workflows/winget-stable.yml

@@ -4,6 +4,9 @@ on:
     types: [released]
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   publish:
     runs-on: ubuntu-latest

src/UniGetUI/Assets/Symbols/Font/demo-files/demo.js

@@ -15,7 +15,7 @@ document.body.addEventListener("click", function(e) {
         testDrive = document.getElementById('testDrive'),
         testText = document.getElementById('testText');
     function updateTest() {
-        testDrive.innerHTML = testText.value || String.fromCharCode(160);
+        testDrive.textContent = testText.value || String.fromCharCode(160);
         if (window.icomoonLiga) {
             window.icomoonLiga(testDrive);
         }