Respond to code review by (a) adding tests, (b) toughening against malicious requests