diff --git a/frontend/src/services/dialogService.js b/frontend/src/services/dialogService.js
index cfb75202..96247b28 100644
--- a/frontend/src/services/dialogService.js
+++ b/frontend/src/services/dialogService.js
@@ -51,8 +51,10 @@ const dialogService = () => {
           },
           {
             default: () => {
+              // String content is rendered as text, never as HTML: callers pass
+              // messages that can contain user-provided file names (import warnings).
               if (typeof dialogConfig.value.content === 'string') {
-                return h('div', { innerHTML: dialogConfig.value.content })
+                return h('div', dialogConfig.value.content)
               } else if (dialogConfig.value.content) {
                 return h(dialogConfig.value.content, {
                   ...dialogConfig.value.props,