The problem is that it's not easily provable that a particular sanitation is correct (as opposed to sanitizing to prevent SQL injection). Your "don't respond to

The problem is that it's not easily provable that a particular sanitation is correct (as opposed to sanitizing to prevent SQL injection). Your "don't respond to irrelevant requests" might work until somebody comes up with something that reverses that.