Objective-C

// Noncompliant code
NSString *input = [request parameterForKey:@"input"];
NSLog(@"Processing input: %@", input);
// Process the input without any validation or sanitization

// Compliant code
NSString *input = [request parameterForKey:@"input"];
NSCharacterSet *allowedCharacterSet = [NSCharacterSet alphanumericCharacterSet];
NSString *sanitizedInput = [[input componentsSeparatedByCharactersInSet:[allowedCharacterSet invertedSet]] componentsJoinedByString:@""];
NSLog(@"Processing input: %@", sanitizedInput);
// Process the sanitized input