Never accept external data without verifying it.

• No matter what the source is

• Do not assume data written by your program and read back in again is safe.