Thank you for your submission, an automated scan of your plugin code's revealed the following issues:

### Required

[[1](https://github.com/watsonbox/obsidian-strava-sync/blob/fdac4f075a71b7305eebc9520788ebec1a9bd8eb/src/SettingsTab.ts#L78)][[2](https://github.com/watsonbox/obsidian-strava-sync/blob/fdac4f075a71b7305eebc9520788ebec1a9bd8eb/src/SettingsTab.ts#L317)]:Using `innerHTML`, `outerHTML` or similar API's is a security risk. Instead, use the DOM API or the Obsidian helper functions: <https://docs.obsidian.md/Plugins/User+interface/HTML+elements>



---

### Optional

[[1](https://github.com/watsonbox/obsidian-strava-sync/blob/fdac4f075a71b7305eebc9520788ebec1a9bd8eb/src/StravaApi.ts#L68-L78)][[2](https://github.com/watsonbox/obsidian-strava-sync/blob/fdac4f075a71b7305eebc9520788ebec1a9bd8eb/src/StravaApi.ts#L94-L101)][[3](https://github.com/watsonbox/obsidian-strava-sync/blob/fdac4f075a71b7305eebc9520788ebec1a9bd8eb/src/StravaApi.ts#L108-L115)]:Obsidian provides the [`requestUrl`](https://docs.obsidian.md/Reference/TypeScript+API/requestUrl) method, it will make sure that network requests work on every plattform.

[[1](https://github.com/watsonbox/obsidian-strava-sync/blob/fdac4f075a71b7305eebc9520788ebec1a9bd8eb/src/StravaApi.ts#L93)][[2](https://github.com/watsonbox/obsidian-strava-sync/blob/fdac4f075a71b7305eebc9520788ebec1a9bd8eb/src/__tests__/ActivityImporter.test.ts#L13)][[3](https://github.com/watsonbox/obsidian-strava-sync/blob/fdac4f075a71b7305eebc9520788ebec1a9bd8eb/src/__tests__/ActivitySerializer.test.ts#L19)][[4](https://github.com/watsonbox/obsidian-strava-sync/blob/fdac4f075a71b7305eebc9520788ebec1a9bd8eb/src/__tests__/StravaSync.test.ts#L69)]:Casting to `any` should be avoided as much as possible.



---



Do <b>NOT</b> open a new PR for re-validation.
Once you have pushed all of the required changes to your repo, the bot will update the labels on this PR within 6 hours.
If you think some of the required changes are incorrect, please comment with `/skip` and the reason why you think the results are incorrect.