- removes injected code from the function if any - has to use an external storage with the original function bodies