moved taint into core-taint
completely reimplement the sink and source stuff
reimplemented sanitizers
bottle html-escape sanitizer
throw an exception for normal attr usage