[SECURITY] Sanitize ddate args