Address vulnerabilities from Noblis scan: 1) remove user inputed text from JSON response.
2) Add X-Frame-Options header to all responses.