> What should you do instead? It's your choice: (1) don't use it; (2) validate it before using it; (3) roll the dice on behalf of your users -- that is, use it

> What should you do instead? It's your choice: (1) don't use it; (2) validate it before using it; (3) roll the dice on behalf of your users -- that is, use it without validating it. Don't let religious beliefs around UA-sniffing cause you to screw over your users.