On this one, I really would like that the user that asked this change specifies what to remove or not.
As I said in the ticket, I don't feel confortable with not checkink '=', ',', ';' and maybe '\n', '\r'.
So without answer, maybe we could make this by unchecking all, leaving the application with the responsability to check itself.
By default, all checking should be done, since it is the official way, even in HTML5.