sanitize findAll filter input by only allowing alphanumeric keys and string-like search values