Bug 856042 - Tighten up sanitization of arguments to the Contacts API. r=bz r=gwagner