script: sanitized replace() arguments