Wraps database query input in corresponding functions to clean input.
Also fixes a bug in ViewHelpers to limit output to parameter uid list.

Change-Id: Ie23babb20ab610193ad06cc4305c31f9e042fb9b
Resolves: #42221
Releases: 6.0
Reviewed-on: http://review.typo3.org/15985
Reviewed-by: Helmut Hummel
Tested-by: Helmut Hummel