sanitize the upload markup