You have to also give bleach the `attributes` parameter. I've added `SANITIZE_ATTRIBUTES` to baseframe.forms.