sanestring: more string checks