input-security test