Not sanitizing when retrieving data from localstorage, if it's a json, it will get it structure sanitized