Accept query selections as sanitized hash