title: Is Sanitizing user input necessary when Request Validation is already on guard
body: <p><a href="https://msdn.microsoft.com/en-us/library/vstudio/hh882339(v=vs.100).aspx" rel="nofollow noreferrer">Request Validation</a> is a powerful mechanism to prevent injecting malicious code via a request to server. This is done on server-side so regardless of the fact that whether any client-side validation has done or not, one can be sure if something unusual is coming then an exception will be thrown automatically.</p>
  <p>My question:
  While we have &quot;Request Validation&quot; in hand, does it still necessary to sanitize requests?</p>
  <p>I'm using Asp.net MVC 5.0</p>
  <p><strong>PS:</strong>
  I'm solely talking in the context of web (not DB or something else) and its potential vulnerabilities (such as XSS).</p>