It's simple: you just offload the validation and security testing to the end user.