decided to add a simple sanitizer, so to avoid injections -- a framework must provide some value, right?