sanitizes stuff in the header