diff --git a/app/html/config.html b/app/html/config.html
index c483b11..b584886 100644
--- a/app/html/config.html
+++ b/app/html/config.html
@@ -919,7 +919,7 @@ <h2>Custom /top Embed Color</h2>
         $('.serverName').text(data.guild.name)
         $('.serverMembers').text(commafy(data.guild.members || "?") + " member" + (data.guild.members == 1 ? "" : "s"))
         $('.serverIcon').attr('src', data.guild.icon || "/assets/avatar.png")
-        $('#otherServers').append(data.ownedServers.map(x => `<option value="${x.id}">${x.name}</option>`))
+        $('#otherServers').append(data.ownedServers.map(x => $("<option></option>").val(x.id).text(x.name)))
         
         // fill in inputs with current values
         $('input[db], select[db]').each(function() {
@@ -978,7 +978,7 @@ <h2>Custom /top Embed Color</h2>
         })
 
         presets.forEach(x => {
-            $('#curvePresets').append(`<option value="${x.name}">${x.name}</option>`)
+            $('#curvePresets').append($(`<option></option>`).val(x.name).text(x.name))
         })
 
         let foundPreset = presets.find(x => x.name != data.guild.name && JSON.stringify([x.curve, x.round, x.bestRange]) == JSON.stringify([db.curve, db.rounding, [db.gain.min, db.gain.max]])) || presets[0]
@@ -1053,7 +1053,7 @@ <h2>Custom /top Embed Color</h2>
             if (!extra) columns = columns.filter(x => !x.extra)
 
             element.empty();
-            element.append(columns.map(x => `<div col="${x.id}"><p><b>${x.name}</b></p></div>`))
+            element.append(columns.map(x => `<div col="${x.id}"><p><b>${x.name}</b></p></div>`)) // WARNING: be weary of XSS (hacking) because of this line if you for some reason let users add columns
             
             levels.forEach(lvl => {
 
@@ -1191,7 +1191,7 @@ <h2>Custom /top Embed Color</h2>
 
         // role selectors
         data.roles.forEach(x => {
-            let roleOption = $(`<option value="${x.id}">${x.name}</option>`)
+            let roleOption = $("<option></option>").val(x.id).text(x.name)
             roleOption.css("color", x.color == "#000000" ? "var(--defaultrolecol)" : x.color)
 
             if (!x.managed) appendRoleSelect('#rewardRoleSelect', roleOption, x, true, rewards.some(r => r.id == x.id))
@@ -1285,7 +1285,7 @@ <h2>Custom /top Embed Color</h2>
                 else $(`#roleMultiplierSelect option[value=${boost.id}]`).prop('hidden', true)
 
                 $('#roleMultipliers div[col="boost"]').append(`<p class="roleMultiplierAmount numberinput" roleID="${boost.id}" min="0" max="100" decimals="4" default="1" tabindex="-1" contenteditable>${+boost.boost}x</p>`)
-                $('#roleMultipliers div[col="role"]').append(`<p class="longname" style="color: ${foundRole.color == "#000000" ? "var(--defaultrolecol)" : foundRole.color}">${foundRole.name}</p>`)
+                $('#roleMultipliers div[col="role"]').append($(`<p class="longname" style="color: ${foundRole.color == "#000000" ? "var(--defaultrolecol)" : foundRole.color}"></p>`).text(foundRole.name)) // sneaky one
                 $('#roleMultipliers div[col="delete"]').append(`<p class="deleteRow deleteRoleMultiplier" tabindex="0" roleID="${boost.id}">🗑️</p>`)
             })
             $('#roleMultiplierCount').html(roleMultipliers.length)
diff --git a/package.json b/package.json
index 567f233..3cb44ff 100644
--- a/package.json
+++ b/package.json
@@ -19,7 +19,7 @@
   },
   "name": "polaris",
   "version": "1.0.0",
-  "main": "index.js",
+  "main": "polaris.js",
   "scripts": {
     "test": "echo \"Error: no test specified\" && exit 1"
   },