Prompt injection defense: input validation middleware for LLM-powered applications