What's not nice is not sanitizing inputs.