> do not allow the other part of the system to act on one if it would be harmful

Network security is really easy right, just don't act on harmful requests