refactored sanitize_track_*() to sanitize_track_str()