There is no security issue here. The security check must be done on the server side. That's it. This article is wrong on the internet. People can already send

There is no security issue here. The security check must be done on the server side. That's it. This article is wrong on the internet. People can already send whatever body they want to your API endpoint. Your client side cleaning won't matter