sanitize input before running eval on it