When we receive an HTML string from your server, we will sanitize it to conform with recommended security practices. That means we’ll reject your HTML response if it includes any of the following:

• Scripts, iframes
• Audio, video elements
• Form, input, command, action, prompt elements
• External CSS styles, and CSS URLs