No sanitizing in create_ajax_instance(), document this

[villesiltala]

There should be a note int the documentation that the create_ajax_instance() function does not filter or sanitize the input coming through from DustPress.jss requests.