I validate all my runtime inputs:

-Cookies
-Local storage
-URL params
-API responses
-Form values
-Environment variables

I use Zod to validate runtime inputs. So, I don’t need to worry if the input is malformed.

If the schema validates, I *know* the input matches my types.

View original on X