How i am not surprised? And people still insist on lax field/input/request validation, without ever knowing where this input will ultimately end up. Sure, you

How i am not surprised? And people still insist on lax field/input/request validation, without ever knowing where this input will ultimately end up. Sure, you know this is a simple txt file, so anything can come into it, right? There is no such thing as malicious txt file.