Correct.
The direct usage of any HTML received via calls to your EBS is not allowed.
Just - as you stated you stated yourself - send the actual data, like a message, in the response and add any HTML for formatting in the JS processing the response.
1 Like