Improve input validation in security/message/create processor