Hi,
The regex substitution on the body introduced in the latest PR breaks functionality for Flask-Oauthlib.
There they pass a body as a dictionary for validation, so regex can't work.

Should the body be cast to string before sanitization?