"... does not contain **unsanitized** user-supplied strings"