Whitelist doc attributes

This is a bit overly permissive but should be okay for now.