I didn't think of that. I assumed the backend would already have sanitized it.

Either way, I think there should be a warning that it should never be used for input sanitation.