Sanitize HTML attributes that come from extended attributes. Fixes #114.