In some parts of the metadata collection process, we do nothing to "sanitize" the strings we collect. For example, the values may have quotes around them. We also don't do much to make sure the values are whitespace trimmed. Hannes brought this up in a code review for the linux distro scanner, so I'm opening a ticket for it.

I think we should either:

a) Decide not to do this, and just put the responsibility on whoever is analyzing this data.

b) Do this as a separate step in the mongoc-metadata code. If we go with this option we should define exactly what kind of sanitizing we want to do here.