Its is very intresting outlook. I read a few stack overflow discussions around this area.<p>I think that item names specifically inventory product names ought to be escaped. A person consuming the API may not necessarily expect unescaped outputs. Although this makes it for a very intresting discussion.