fix 2 low vulnerabilities, centralize env vars validation

fix 2 low vulnerabilities, centralize env vars validation #826