Validate all requests (query, params, body) with zod or valibot and throw custom error if validation fails.

Also sanitize requests after validation to prevent malicious attacks such as SQL injection and cross-site scripting (XSS).