I wish they documented the sanitization logic beyond that it's optimized for JWTs -- there are so many other session token formats and naming conventions that I would have to test this tool for each site captured instead of making a blanket recommendation to use it.
It is open source and you can read through typescript logic.