add rule: attr-unsafe-chars