[SECURITY] Sanitize ddate args

Pull ASAP. Maybe catch exceptions...