It's been my experience that most programmers don't care. Apps work without input validation/output sanitation. They see this as extra work so it's not a prior

It's been my experience that most programmers don't care. Apps work without input validation/output sanitation. They see this as extra work so it's not a priority to them. Unless mgt makes it a priority (and fires guys who don't do it) or they learn the hard way, they'll never care.