FavCompleter: Forgot to never trust user input