Sanitizer::safeEncodeAttribute(): also encode ]