extension ID filters should be consistent

[cwillisf]

Expected Behavior

There should be a clear definition of what constitutes a legal extension ID and all places in the code which filter extension IDs should match that.

Actual Behavior

The newly-introduced extension ID sanitizer (from #2476) doesn't match the previously-existing code here.