The improvement is in considering (userSupplied + "/") itself a sanitising prefix.
java/alert-suppression-annotations