XSS Protection in tickets from API

Hi folks!

I'm sorry if there's already some documentation on this, but I couldn't find with some typical search keywords.

I'm trying to create tickets in the helpdesk using the Zendesk API (using `html_body`). However, since it's possible for anyone to send any kind of arbitrary text data in that, does Zendesk actually do some kind of filtering?

Please let me know if any clarifications are needed.