Numerous spots in the code don't currently check their parameters. We should basically audit the whole user-facing portion for this (which is small) and make sure we check that values are in-bounds. Numerous other enhancements are blocked by this, so this needs to happen first