> For the complete documentation index, see [llms.txt](https://web-dev-guide.wishtack.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://web-dev-guide.wishtack.io/security/client-vs-api-validation.md).

# Client vs API Validation

All the data exchanged with API should be validated by the API itself.

Malicious users can easily bypass client-side validation.