Validation protects against injection attacks

Fix for #34