Sanitization should happen after onGet