sanitized string and character constant parsing