Latte: apply modifier safeUrl automatically to attribute href

Yes, this is not about escaping, this is sanitization. In fact, escapeXML() provides some kind of sanitization too. Pros and cons?