moved sanitize() to dispatcher