Issue #3008166 by joseph.olstad, alexpott, catch, cilefen, xjm: Unnecessary looping in filter_xss() when processing attributes