Better sanitize values

https://hackerone.com/reports/24185
Yes, this line is not used now. It might be come from copy&paste.