Schema validation

Validating a request against a strict schema rejects malformed input before any of your code has to reason about it.

It narrows what the application will even attempt to interpret, which removes a large class of parsing surprises. It is also cheap, declarative and generated from the specification you already wrote, which makes it one of the better returns available in API security.