TLDR
Super interesting. Especially the OWASP recommendation of always returning a JSON object from your APIs for the same reason.
Super interesting. Especially the OWASP recommendation of always returning a JSON object from your APIs for the same reason.