Security cleanup on 'where' parameter in a couple of list helpers