sanitizer now removes interpolated js