protect against malformed client requests