added a note on output sanitization