don't sanitize rel attribute in link