Sprunje should implement whitelisting and validation

[alexweissman]

Right now, Sprunje will automatically match query parameters for filter and sort to columns in your table(s). However, allowing certain columns to be filtered/sorted on could be a security issue - you may not want to allow sorting a list of users based on their account_balance - even if the actual values in the column aren't returned with the results.

I sorta started this, but never finished it - every custom Sprunje should have either a whitelist, or blacklist, of allowed filters and sorts.

[alexweissman]

This has been done in 4.0.12-Alpha.