There's apparently still a lot of user input going unsanitized in 2026.