Astro Guideline: Security — Validate API input. Description: Check and sanitize all input. Do: Zod validation for API routes. Don't: Trust all input. Good Example: const body = schema.parse(data). Bad Example: const body = await request.json(). Severity: High. Docs: .