None. The point of "falsehoods programmers believe about..." lists is that "validation" of user attributes is an arrogant and inherently foolish concept, and you shouldn't try.