Function sanitize

This almost adheres to the GraphQL specification Names RegExp. The difference is that this function allowes a string to start with a digit, while the GraphQL specification doesn't. https://spec.graphql.org/June2018/#sec-Names