Destr: sanitizing?

[Yves852]

Hello.

Destr is described as A faster, secure and convenient alternative. In a Nuxt context using readBody it says Reads request body and *tries* to safely parse using destr.

Can it be considered strong enough to use any incoming data or would you recommend to use a sanitizing solution - for example isomorphic-dompurify - in addition of readBody?

Sorry if the answer is obvious but the documentation at https://unjs.io/packages/destr is a bit lacking on that matter. It would be appreciated to mention the safety and limitations/recommendations if any.

Thanks for all the work.