title: Is request data already sanitized by Flask?
body: <p>Should data which comes from the user (like cookie values, variable parts in a route, query args) be treated as insecure and processed in a particular way? Does Flask already sanitize escape input data so passing it to a function <code>test(input_data)</code> is secure?</p>