[EricE]

It still boggles my mind that input sanitization/validation hasn't gotten a formal discipline around it.

It's boring and tedious, yet crucial.