info: sanitise the request right after it's been received