yes this kind of fucking shit like "sanitizing code" matters when your product is literally giving a random number generator a computer, hooking it up to the internet, and telling it to run code right next to mee maw and paw Paw's whole fucking markdown life history and banking credentials!