There's a moderate efficiency gain to be had by using Set#include?, rather than Array#include? in the sanitizer.