GUI security

The client and client-direct component both undertake user input and output validation and “sanitisation”.