extracting ESAPI canonicalizers; TODO extract all other canonicalizers