Extensions Guidelines - Data received over AJAX

[BarryCarlyon]

See also this duplicate post on the same subject for some notes:

Acceptable way of modifying contents of Extension Panel

Hello, as someone relatively new to Javascript and even more so Twitch Extensions, I am currently wondering what the acceptable way of modifying an Extension’s contents is. As the guidelines state: Do not inject directly into the DOM any data obtained dynamically over AJAX (e.g., JSON is fine, HTML is not). But if I just take a string from my JSON object and throw that into the mix, it could still contain arbitrary HTML tags, so I’m a bit confused by this line. (Let’s blame it on a language…