[api] sanitize