sanitize working but not fully tested