Should we do any sanitizing before redirecting to user supplied data?