Revalidate length after sanitization

HTML sanitization can mutate fields after validation; length check now runs after sanitization to prevent data loss from exceeding column limits.