You seem to have accidentally written "sanitising user input" where I am sure you of course meant to write "properly handling data and correctly encoding output".