added a bundle sanitizer for XSS prevention