Any data that enters your system from outside a trust boundary should be treated as untrusted until proven otherwise. That includes form fields, API payloads, file uploads, headers, cookies, queue ...

Use it only on systems you own or have explicit permission to test. Comply with all applicable local, state, and federal laws. Not use it for any malicious, destructive, or illegal activities. ⚠️ ...