Update API docs to use the new SQL sanitization function