Sanitize WP Query

> It's safest just to sanitize everything.

@danielbachhuber  in #1 

I may have misunderstood - but did you mean we cannot rely on parse_query to sanitize the args we are passing to WP_Query

I have tried to sanitize all the possible args below... am I being crazy?

cc @danielbachhuber