Is this a do-it-yourself situation, or is there some canned machinery to sanitize client-communicated text for use as string values in mongodb queries. In fact, what's the best way to do this?