Is there a reason for now allowing all data attributes but only a whitelist of those containing only data-md-bad-attribute?
I would really benefit from those data attributes and opened a PR to address this issue.