prefixed self:: when calling itself in sanitize()