form2: allowed all data-* html attributes