Problem Statement: The problem with the website which I am working on is that I get an API response instead of html. The API response contains the injected payload but has all the special chars in encoded format, but it shows up in the page source of UI without encoding,which triggers XSS. If I try to fetch the html of webpage using a GET call, then I get the html of the webpage but it has empty templates and no data in it.
Is there a way through which the problem can be overcome? I can take care of the coding part, but I am not able to figure out how to proceed with this problem. A general idea of how to proceed will help.