Secure code automatically

import flask
Autofix with Vidoc
@app.route('/api/user/<user_id>', methods=['GET'])
def get_user_data(user_id):
  user = database.find_user(user_id)

  return user

@app.route('/api/user/<user_id>/settings', methods=['POST'])
def update_user_settings(user_id):
    settings = request.get_json()

    # No input validation
    database.update_settings(user_id, settings)

    return {"status": "success"}