Using assertions to validate malicious input is not a valid software engineering choice, unless one can guarantee that the assertions will always be active in t

Using assertions to validate malicious input is not a valid software engineering choice, unless one can guarantee that the assertions will always be active in the production code.