added explicit sanitization for metadata
Merge pull request #172 from Pomax/bug892066

added explicit sanitization for metadata