> At least sanitize in a way that won't break the server but will throw an error. If you need to sanitize to avoid breaking the server then the server is alrea

> At least sanitize in a way that won't break the server but will throw an error. If you need to sanitize to avoid breaking the server then the server is already broken. Also, never sanitize, validate on input and escape/encode on output, but sanitization (meaning removing/cleaning invalid input) is the wrong way.