Category input sanitization vs output encoding