test bbox sanitization