avoid segfault when calling sanitize_string() on NULL