Incomplete multi-character sanitization

[MikePfunk28]

When sanitizing input, the current implementation only handles single-character replacements. This can lead to issues when multiple characters need to be sanitized in a string, as only the first occurrence will be replaced.