Concretely, TFA lists a bunch of input validation that is being made more strict in the default configuration.