Update xss-sanitize.cabal

bump text upper bounds