Better sanitize values

https://hackerone.com/reports/24185
gotta mention @KorvinSzanto :wink: