ClickLock Mac malware uses a fake verification page to trick users into pasting a Terminal command, then steals passwords and ...
Any data that enters your system from outside a trust boundary should be treated as untrusted until proven otherwise. That includes form fields, API payloads, file uploads, headers, cookies, queue ...