Add option to allow or prohibit html attributes

I’d like to set the markdownlint.json file so that it allows HTML tags such as <table>, <tr>, <td>… tags, but prohibits any attributes like onclick or onmouseover. I’ve found the "MD033": { "allowed_elements": ["table", "tr"]} entry, but no way of banning or allowing specific attributes within those tags.

I would like to have something like:

"MD033": { 
   "allowed_elements": ["table", "tr"], 
   "allowed_attributes": ["class", "style"]
}

Why: I want to avoid the risk of accidentally letting through malicious code inside Pull Requests. I’m also converting docs from XHTML generated by Madcap Flare into markdown. Some of the tables are complex, with tables inside tables, multiple uses of colspan and rowspan. I am setting aside such tables from the conversion process (I’m using pypandoc in python, a thin wrapper for pandoc).

[DavidAnson]

Someone who wants to bypass the rules can disable them with a comment. 😃 The linter is meant to help well-meaning people and is not a security boundary.

[FrancisVila]

Thanks David, I’ll use that argument to justify adapting the .markdownlint file in my repo.