[t1929] sanitization fix

slightly less sanitization, which we can do due to post-DOMContentLoaded buildup.

main analysis and justifications: https://webmademovies.lighthouseapp.com/projects/65733-popcorn-maker/tickets/1929