So far, there appears to be no better solution than mimicking Sanitizer::setupAttributeWhitelist's internal array, as Sanitizer's various methods for cleaning attributes all presuppose that the tag is natively supported by MediaWiki or require a custom whitelist anyways.