Adding onSanitize as an option for non middleware usage

[lifengkow]

It will be good if we can have onSanitize callback for non middleware usage

[fiznool]

The existing sanitize standalone function could be changed to return { target, isSanitized } but that would be a breaking change. Happy to implement and bump a major version if it would be useful.