ensuring the input is intentionally what the business logic requires

allow-listing deny-listing

It is important to ensure the validation is done at the server side, not just client side.