sanitize user added select attr values

http://www.concrete5.org/index.php?cID=471278&editmode=