It turns out sanitizing users inputs is a good idea. Even if the user is you.