backend: fix too strict sanitizing of results