resourceloader: Sanitize lang with isValidBuiltInCode(), not isValidCode()