prevent bypassing validation using base64
prevent constructing arbitrary function using 'Function'
Merge pull request #145 from phoeagon/master

prevent bypassing validation using base64