Hi thank's for your comment it's appreciated In the general work environment when working with REST APIs, it's not strictly necessary to validate XSS protection anymore. However, it never hurts to have that knowledge.