Is the user query unsafe?