fix sanitize for rel target attributes