const title = response.potentiallyMaliciousInput;
// This is safe:
const element = <h1>{title}</h1>;