It is like asking if it would catch SQL injections. Just sanitize your inputs !