At a previous job we used custom patches for the PHP interpreter which implemented just such a "dirty flag", among other things. It would also die if you sanit

At a previous job we used custom patches for the PHP interpreter which implemented just such a "dirty flag", among other things. It would also die if you sanitised a clean string, since that indicates that the sanitising logic is dodgy.