I am returning a partial HTML, containing HTML, scripts and styles to a third party to host it on a part of his page. But the problem is he can write scripts for my buttons to s
