Customizable sanitizer

I think you can replace for:
```java
environment.get(whitelistKey, null)
```