Don't use unsafe defaults ffs, that's how things get exploited.
How can it be enforced? Any suggestions?
Users can also make it a bit more complicated while using `*` to get hacked by accepting responses which match some kinda pattern(it's not bullet-proof though) and simply discarding others.
https://github.com/facebook/react/blob/80bff5397bf854750dbe7...