Fix #96, xxs by forcing nested attack vector strings. Brute force removal of non-whitelist attributes.

Signed-off-by: Rick Waldron <waldron.rick@gmail.com>