added replace string literals method and specs to sanitizer, reworked some specs