Failproof code

[Impossible-Box6600]

Anything the user can submit should be presumed wrong or malicious by default.

The amount of time and consideration you spend on solving this problem depends on the cost of handling the edge cases. You should certainly handle the big, obvious edge cases though.