sanitize inputs to exprify's use of eval