Validate all requests (query, params, body) with [zod](https://zod.dev/) or [valibot](https://valibot.dev/) and throw custom error if validation fails. Also sanitize requests after validation to prevent malicious attacks such as SQL injection and cross-site scripting (XSS).