https://medium.com/@nemanjablagojevic/why-directly-storing-third-party-responses-can-open-the-door-to-xss-attacks-cfbbb8c4bbdc