code: public static String sanitize(String raw) {
          return (raw == null || raw.length() == 0) ? raw : HTMLEntityEncode(canonicalize(raw));
      }
docs: Sanitize user inputs.
  
  @param raw the input string to be sanitized
  @return the sanitized string