sanitizer now handles numbers