Paranoia on XSS since we're dealing with request input variables.