chore(core): Removes usages of extract() function

Fixes #6141
security(river): Sanitizing results of 'creating', 'river' plugin hook before river insert.

Refs #6141