Properly sanitize CGI arguments (like `gtk+').