# Input Validation

## Purpose

Protect the application.

---

# Validate

All inputs:

- Forms.
- APIs.
- Imports.
- Files.
- AI outputs.

---

# Protection Against

Examples:

- SQL injection.
- XSS.
- HTML injection.
- Malicious uploads.

---

# CV Builder

Special attention:

Users can create:

- Custom sections.
- HTML-like content.
- Formatting.

The renderer must sanitise content.

---

# Rule

Never render user content directly without validation.