As a general rule, never assume that input you get from users is safe.

• 通常,决不假定从用户获得的输入是安全的。