Customizable sanitizer

maybe we should build this `AttributeBuilder` inside `HtmlElement`, instead of just reading its map? something like:

```java
AttributeBuilder builder = htmlElement.attributesBuilder();
```

I think it would be also easier to unit test it.