skip sanitizer if the body is not JSON

[stevehu]

As more and more body formats are supported in the BodyHandler, we have the situation that the body is not a list or a map. We cannot depend on users to disable the sanitizer handler for endpoints that the body is not suitable for sanitizer. To avoid errors, we need to change the handler logic to only apply to maps or lists.