Any data that enters your system from outside a trust boundary should be treated as untrusted until proven otherwise. That includes form fields, API payloads, file uploads, headers, cookies, queue ...
If your legs are beat up after one too many hard weeks on the road, it might be time to give the ol’ hips and knees a break with some time on the bike. Cross-training is a boss move for runners ...