Add safety check for falsy sanitizer input.

Created by: peterblazejewicz

When the input of sanitizer evaluates to false:

• do not rely on assumed string length
• default to empty string on falsy input

With that change the falsy input like null, undefined or empty string should return the same results: empty string.

Thanks!

Fixes #29474 (closed)