What validation is enforced on contact and newsletter forms?

How submissions are validated and protected from spam.