Can you really depnd on validateRequest to catch all the malicious inputs from the client? If yes, where I can catch the exception produced by that? I mean the HttpRequestValidationException.