Comment 12 for bug 1098377

I've tested Dan's follow-up patch that has the sanitization routine take the Pg identifier maximum length into account. The security branch lp1098377_savepoint_name_sanity_tested contains both patches with our signoffs.