json sanitizing