Replace $sanitize with entity escaping for now