Fix options['order'] also being vulnerable to injection attacks.
Bump version number to 1.3.17

We missed a commit in 1.3.16 and need to make a new tag.