XSS Related Information

Apps should sanitize and/or prevent execution of data outputted from the API to prevent Cross Site Scripting attacks.