fixed to correctly sanitize the comma-separated values in the 'list' option of the 'mysql' module