Added notes about sanitize strings from users