How to prevent XSS and sensitive data exposure in Go