[n2d4]

The problem is the validation. You'd expect you just have to validate a lower bound, but you also have to validate an upper bound.

[leptons]

It's user input, you have to validate all the bounds, and filter out whatever else might cause problems. Not doing so is a a problem with the programmer, not setTimeout.