title: Risk in returning HTML content on AJAX call via HTTPS
body: <p>I wanted to load HTML contents dynamically, such as updating a Bootstrap's modal dialog contents via AJAX call (because refreshing the page and showing the modal again is weird), but before I do that, I want to know <strong>what risks</strong> that I will need to concern when doing so, and possible solutions.</p>
  
  <p>The main reason to do this is that I'm developing a portlet for Liferay, and I wished to update the content of my portlet dynamically without refreshing the whole page.</p>
  
  <p>Of course I could return data in JSON from my server to client, but I will have to write complex client side logic to update the DOM, which the logic is probably done easier in, say, JSP</p>
  
  <p>Assume the webapp is HTTPS only, not sure if this will help with anything.</p>