these should probably be html::clean_attribute