input validation (e.g. regex)