Had a look at the code, no validation other than on the client. Sidenote, forgot how clean, minimal and expressive Python can be, was a pleasure to quickly grok.