Move sanitization to backend