Considering making the XSS safe/unsafe attribute lists extendable

Problem/Motivation

Related to #3324862: Follow up on 14614509: Trigger error when attribute is not in list → we should consider whether or not to make the safe and unsafe attributes lists extendable, for example via container parameters.

Steps to reproduce

Proposed resolution

Remaining tasks

User interface changes

API changes

Data model changes

Release notes snippet