Nonce + Permissions check for ajax posts

I have added both a nonce check and a permissions check.

Do I need to do more to sanitize the query? I would like to be able to specify any WP Query ans for that to be handled OK by the AJAX callback. Doesn't WP_Query sanitize any input?

@danielbachuber If I need to do more - could you advise?

Thanks