Securing HTML fragments returned by API endpoints | Hacker News Reader