test to see if evil string is safe