Please use **http://flask.pocoo.org/docs/api/#flask.json.jsonify** for security reasons. 

--
See the comment above (https://github.com/jirikuncar/invenio/pull/193/files#r11673434).