which honestly is only used once, so we may want to drop that in favor of html5-based validation anyway