The following types of sanitization may be used. There may be others that have not
been covered yet.
VERIFICATION: check if the input is already good
INDIRECT SELECTION: use the input as a mapping to known-safe values