Sanitize oEmbed data before displaying it to prevent XSS
Use Echo.Utils.sanitize method defined in JS SDK
Tagging the v2.0.5 release