If you involve |API| an external input, no one cares about the validation, that actually succeeds in virtually all cases. You should care only about the fast pa

If you involve |API| an external input, no one cares about the validation, that actually succeeds in virtually all cases. You should care only about the fast path - the rest are quite irrelevant (outside DoS attempts)