Sanitizing query parameter building