Validation: Username and email lack input sanitization, vulnerable to injection and script attacks if stored in database

Validation: Username and email lack input sanitization, vulnerable to injection and script attacks if stored in database #589