We should validate a lot on the server-side (for example are all attributes correct present in the requests)?