sanitize output