結果 : input validation must be based on encoding