Validate test values

This is meant to mitigate potential security vulnerabilities leading from test values being controlled in URL parameters or cookies.

cc @3n @cji