fixed signature of sanitizeInput