sanitize CSV data