Sanitizer: remove deprecated parameter to escapeIdReferenceList()