sanitizing code