Form field validation for Code Injection

Just a technical question to our more experienced people here in this forum or Bubble staff.

Are we supposed to do SQL code injection validation/sanitization for our form fields or is this being handled at the back-end by Bubble.

@emmanuel @kathleen @grace.hong