allow target attribute when sanitize